Nearly everyday we see phishing attempts and in order to spread awareness from time to time we will share some examples with our blog readers. Here's the never ending UPS delivery Notification messages as an example. As you can see in the message there is one dead giveaway right away, the domain intruck[.]com which is claiming to be United Parcel Service in the received message. Looking at the link the click here part of the email reveals the domain https://capitalsolar.in.ne

We have been seeing more and more of these at customer sites but the callback links are typically already in the FirstWatch sensor. Do not client on the link as it leads to some nasty infections. Please note that we have received a second email this time with an IRS and DHL shipping notification theme. IOC's for this second email have been added below. A look in the Jigsaw Analytic Platform show recent activity IOCS 105.8.2[.]175 - X-Originating IP 104.27.158[.]152 css.oppos

Today must be the day of phishing. Already we have noted some American Express themed phishing, USPS themed shipping notifications and a host of other attempts. These campaigns are so effective because people will click on the attachments and infect themselves. Just to keep people in the loop here is what we have seen today. American Express Incident (americanexpress@ampress[.]com) : 63.252.93[.]222 ironport2.hkusa.com 192.168.109[.]132 - Spoofed IP spenix@zebucompliance.com

Jigsaw Security is sharing this information with the public in order to bring awareness. We have started seeing more and more of these events and feel that the only way to get the word out is through awareness. Messages come into inboxes that say that suspicious email activity has been observed on your email account. The message in this case is a spoofed message from "cavallim@serverlogic.com". When the link in the email is clicked on from a mobile phone the user is presented