Today in my inbox I got a new Canada Post delivery scam email that I want to share with you. Let’s dive in.
Let’s start with what’s wrong with this email. For starters, Canada Post would never send you an email like this. Besides that, that there’s no name, address or tracking number on this email. Those should be immediate red flags. Then there’s this:
An email address that isn’t Canada Post. #Fail.
So far this is a pretty low effort scam email that is likely to have a success rate that is close to zero. But what would they be after. Not that you should, but I clicked on the “My Package” button and I got taken to this website.
The first #Fail with this website is that if you look at the address bar, this website isn’t Canada Post as the real website is https://www.canadapost-postescanada.ca. So that should scare you into running from this website as quickly as possible. But let me go deeper to find out what their game is.
I haven’t typed in a single thing and it somehow knows that a delivery attempt was made. How is that possible? It isn’t is the correct answer. But if you ignore that, I apparently owe $2.99. Seeing as there’s nothing that identifies me, I don’t know how that is possible as well.
First it asks for your name and address. You can see that I filled in some information.
And here we go. It’s asking for my credit card info. That’s interesting seeing as the email that I got said this.
I guess they’re hoping that you won’t notice that part. Now I couldn’t get past this point as this website had code to validate that the credit card was legitimate. But I think that you get the point. It’s one of many Canada Post delivery scams that has a slightly different flavour in order to fool you. Thus if you see this email hit your inbox, delete it and move on with your life.
L.A. County Courts Pwned In Ransomware Attack
Posted in Commentary with tags Hacked on July 22, 2024 by itnerdThis isn’t a good look. The L.A. County Courts, as in all of them, have been shut down because they were hit with a pretty devastating ransomware attack:
The attack was detected Friday and doesn’t appear to be related to the CrowdStrike software update that paralyzed Windows computers around the world and affected governments, airlines and other agencies last week, court officials said in a Sunday news release.
This closure extended to all 36 courthouses in the county, and officials did not expect it to last beyond Monday.
“While the Court continues to move swiftly towards a restoration and recovery phase, many critical systems remain offline as of Sunday evening,” presiding Judge Samantha Jessner said in the release. “One additional day will enable the court’s team of experts to focus exclusively on bringing our systems back online so that the Court can resume operations as expeditiously, smoothly and safely as possible.”
The affected court systems span the My Jury Duty Portal and the court’s website, as well as the court’s case management systems, according to the release.
Rogier Fischer, CEO, Hadrian had this to say:
It was prudent from the court’s side to clarify that the whole incident is unrelated to the Crowdstrike-Microsoft incident, noted Rogier Fischer, CEO of Netherlands-based cybersecurity company Hadrian.”Apart from the legal obligations, it becomes a moral obligation of the key stakeholders of a cybersecurity incident to clear the air and shut the possibilities of any form of miscommunication,” he said.According to him, organizations hit by a ransomware attack must immediately execute these basic defense steps: isolate the infected systems and notify the respective IT department, senior management, and relevant authorities such as the FBI or CISA.”Investigate the scope of the attack, document your actions, and carefully decide whether to pay the ransom, consulting legal counsel and cybersecurity experts. Finally, restore systems from clean backups, implement stronger security measures, and communicate transparently with stakeholders while reviewing the incident to improve future responses,” he added.
It appears that even the justice system isn’t immune from cybercrime. Thus it reinforces that everyone needs to take action to make cybercrime less devastating than it is now.
Leave a comment »