Bad Actors Use Improved Approaches to Concealing Dangerous Links
I’m going to link to a post from SmarterMSP.com, but I want to summarize here. Most of my clients won’t benefit that much from the linked article. They need to follow my much simpler rule set:
- Don’t send email as a reply to something you get, even when it looks like it’s from a business you know. Go directly to their website by typing in the URL, call the number on your card (for a bank). Use contact information you KNOW is correct.
- Never click on a link in an email, even if it says it comes from me personally, unless you get on the phone and verify it!
- Never call a number you get in an email. Call a number you KNOW belongs to the business.
This is only going to get worse. AI allows even people who are not very clever to create clever fake emails.
For those who want some details of new approaches, which are really enhancements to old approaches, check out the article: Threat Spotlight: Tycoon phishing kit reveals new techniques to hide malicious links.
(Featured image generated by Jetpack AI.)
