Debunking hoaxes and exposing scams since 2003!





Jump To: Example    Comments   References

PHISHING SCAM - 'Refer to Documents via Dropbox App'


Jump To: Example    Comments   References

This email requests that you click a link to refer to 'urgent and highly confidential' documents using the Dropbox app. It instructs you to click a 'Dropbox' link to download the documents and asks that you 'kindly do the needful'.

However, the email has no connection to the popular file storage and sharing service Dropbox and the link does not open any documents, urgent or otherwise.

Clicking the link takes you to a bogus website that claims you must login to your webmail service provider before you can view the supposed document. The page features clickable icons for several popular email service providers, including Gmail, Yahoo, and Outlook. The page also includes a generic 'email account' icon aimed at people with accounts not specifically listed.

If you click the icon corresponding to your email provider, you will be taken to a second fake page that asks you to submit your account email address and password to 'login'.

The criminals running the scam can collect the login credentials you supply and use them to hijack your email account. Once they have gained access to your account, they can use it to launch spam and scam campaigns. Because these spam and scam emails come from your account and may include your normal email signature, people on your contact list may be more inclined to believe that the messages are true and follow any instructions they contain.

These attacks attempt to panic recipients into clicking links and submitting their details because they mistakenly believe that there is an urgent and confidential matter that they must attend to.

Cybercriminals commonly send out fake messages claiming that recipients need to click a link or open an attached file to view an important document. Many, like the one discussed here, are used to trick people into supplying their personal information. Others are used to distribute malware.

If you receive such a message, do not click any links or open any attachments that it contains.

   

Share







Bookmark and Share





related Links

Related Links

Identity theft is one of the fastest growing crimes in the world. Learn how to stay safe online with Hoax-Slayer's comprehensive eBook:




Example

Hello

Please refer to the attached documents using Dropbox App. click Dropbox to download for your reference. Its urgent and highly confidential, kindly do the needful.

Best regards

Thanks


Chua


Phishing Scam

Last updated: May 30, 2015
First published: May 11, 2015
By Brett M. Christensen
About Hoax-Slayer

References
Friend Stranded in Foreign Country Scam Emails
'Confidential Document' Google Docs Phishing Scam






More stories!

'Internet Capacity Warning' Phishing Scam
According to this email, which claims to be from the 'Support Department' at 'Information Technology Services', your internet capacity is 70% full and you therefore need to contact support to avoid problems.
Published: July 6, 2015


Kroger 'Free Coupons' Survey Scam
Message being distributed across Facebook claims that users can receive free coupons from American retailer Kroger just by sharing a message and visiting a third party website to claim their prize.
Published: June 16, 2015


Pointless Facebook Warning - Hackers Posting Insulting Messages or Sexual Content In Your Name
'Hacker' alert messages circulating on Facebook claim that, without your knowledge, hackers are posting insulting or sexual messages that appear to come from you onto your Facebook Timeline.
Published: June 3, 2015