Tech Force
  • Home
  • I.T. Support
  • Managed Services
  • Cloud Solutions
  • Blog
  • Contact Us

Tech Bits & Bytes Blog

Beware of Fake Meeting Requests

6/20/2022

Comments

 
Hi,
Important that we meet discuss speerfishing attacks over business comunicatons. We need to make plan about this IMMEDIATELY. Please click on the link [uurl.callender.com] to make an appointment with IT for quick tutorial.
Regards,
IT
Picture
There are several things wrong with this email, and hopefully, you noticed them. All are red flags you can look for to avoid fake meeting requests or calendar-invite scams.

Business Email Communication (BEC) scams are not new. For example:
  • Facebook and Google suffered a $121 million BEC scam.
  • Ubiquiti lost $46.7 million to an attack.
  • Toyota transferred $37 million to crooks in a BEC snafu.

In 2020, BEC attacks were the most lucrative scam. The US estimated cybercriminals made over $1.8 billion with this approach. Beyond money, falling victim to a BEC attack also costs your business time and reputation. Here’s what to look for and how to protect against BEC scammers.

How BEC Scams Work
With many more people working from home and meeting virtually, there’s been an uptick in BEC spearfishing attacks.
On Gmail, the bad actor needs only your email address to send an invite that adds to your calendar by default. Then, you might click on what appears to be a meeting link, which actually takes you to a malware site.

Zoom has also become an attack vector. You get an invite to a meeting that asks you to login into Microsoft Outlook. You’ve done it so many times before, except this is a fake login page, and it’s set up to steal your access credentials.

How to Protect Against BEC Scams
Educate your users. As with any other type of email scam, users need to learn to be careful about the links they click. Some indicators to look for, which you can see in our opening example, include:
  • spelling mistakes;
  • urgent appeals;
  • poor phrasing;
  • suspicious links.

Email addresses, links, and domain name inconsistencies are more bad signs. Plus, be wary if something seems too good to be true (a free laptop?) or is an unusual request (transfer $1 million from the CEO’s account).

Google Calendar users can go into General settings, then Event settings, and switch off “Automatically add invitations.” Instead, select “No, only show invitations to which I have responded.” Also, under Events from Gmail, you can stop calendar events auto-generating based on your inbox. Keep in mind, though, that you’ll also be blocking legitimate events.

In these days of the hybrid workforce, we’re used to clicking on links from Zoom, Google Docs, and Microsoft Office as part of our daily workflow. The cyber bad guys know this and are taking advantage of it. Unsubscribing from email lists, keeping your email private, and reporting spam to IT can all help.

Your business might also benefit from working with a managed service provider to use a third-party spam filter. Our experts can also review your cybersecurity posture and identify areas to improve your defenses.
 
Contact us today at 262-515-9499
Comments

    Tech Force Blog

    We provide you with  important, practical tips and insight for your technology and networks for both home and business.

      Contact Us for Help!

    Submit Request

    Archives

    January 2023
    December 2022
    November 2022
    October 2022
    September 2022
    August 2022
    July 2022
    June 2022
    May 2022
    April 2022
    March 2022
    January 2022
    November 2021
    October 2021
    September 2021
    August 2021
    June 2021
    May 2021
    April 2021
    March 2021
    February 2021
    January 2021
    December 2020
    November 2020
    October 2020
    September 2020
    August 2020
    February 2019
    January 2019
    December 2018
    November 2018
    October 2018
    September 2018
    August 2018
    July 2018
    June 2018
    May 2018
    April 2018
    March 2018
    February 2018
    January 2018
    December 2017
    November 2017
    October 2017
    July 2017
    April 2017
    February 2017
    January 2017
    December 2016
    November 2016

    Categories

    All
    Business Continuity
    Business IT
    Cloud Computing
    Cyber Security
    Networking
    Tech Talk

    RSS Feed

Get in touch with us!

p.   (262) 515-9499
e.   support@techforceonline.com

Office Hours:
Monday - Friday:  9am - 5pm

Contact Us Today!
Remote Support
Residential Online Backup

Picture

See what our clients have to say...

Very pleased with Tech Force!  We've been using Tech Force for over four years now.  We've had a lot of different people do computer and IT stuff for us, but Tech Force is the first to come in and implement a plan.  The plan was executed and we've had no problems.

Tech Force is very good at getting back to you when you have a problem. You don't have to wait and wait for things to get done. If they can't take care of the problem remotely, they will come over here. They always send somebody who is skilled and knows how to take care of the problem, unlike the companies we've used in the past. We've been very pleased with Tech Force!  ~ Ed V., Advanced Spine & Sport

More Client Reviews

Read Our Customer Reviews


We service Racine, Mount Pleasant, Sturtevant, Wind Point, Union Grove, Elmwood Park, Franksville, Caledonia, Kenosha, Somers, Pleasant Prairie, Bristol, Parkside, Oak Creek and Franklin, WI and surrounding areas. Copyright © 2009-2023 Tech Force Computer Service, LLC.
  • Home
  • I.T. Support
  • Managed Services
  • Cloud Solutions
  • Blog
  • Contact Us