Jottacloud refer other users pdf#
Jottacloud refer other users series#
Jottacloud refer other users download#

This approach has also proved beneficial to detect the variation in these types of attacks and filter them down in terms of volume or scale. With the help of predictive filtering system, threats that use email as a medium are filtered or blocked before they cause menace. Predictive filtering system focused on URL and other email features are deployed in timely intervals to catch changes in the rapidly changing email threat landscape. These images contain screenshots of actual phishing emails along with the preview of landing webpages:Дetection against file sharing phishing messages:

Jottacloud refer other users series#

The following series of screenshots depict the working of this attack. This URL is the phish URL embedded within the file. As soon as the file is downloaded and opened, it displays another URL which instructs the email user to click and provide authentication.

Jottacloud refer other users download#

The email user is prompted to download the file to get an insight on the pending invoice. This is a legit online file sharing services portal with a file awaiting to be downloaded. To reassure, the potential victim checks the webpage on which the URL in the email body has routed. Here, the trust factor is gained by the threat actor. The potential victim hovers the cursor over the URL, looks at the https protocol at the start of the URL and therefore clicks on it. To add a cherry on the cake, threat actors use URLs of online file sharing services on which the phishing file is hosted. Threat actors tend to be good at reading minds. Such language is purposely injected in the email body so that when read, creates panic in the victimвЂ™s mind to perform the actions provided in the email. In general, these emails masquerade as invoice or payment notifications messages with an overwhelming tone of urgency and limited or short body content. Threat actors heavily rely on these two factors. Boom! YouвЂ™re redirected either to an inactive webpage or if youвЂ™re lucky, to a proper legitimate webpage with fancy padlocks on the side of the URL.ДЄs always, the not so secret ingredients to the success of this attack are sense of urgency and trust. You look at your watch and enter the credentials in a hurry. For authentication purposes, the page prompts for credentials. Once again you click on this new URL and then you are redirected to a pretty perfect legit login page. But as soon as you open this file, instead of seeing an invoice, there is an instruction to click on a URL provided in this file to view the invoice. All thatвЂ™s remaining is to download the file, view the invoice and pay accordingly.

Jottacloud refer other users pdf#

pdf extension file named as вЂњinvoice_for_payment.pdfвЂќ.

You click on the URL, which routes to a legit online file sharing services portal and voila, thereвЂ™s your file. HmmвЂ¦ The URL provided in the email is of course legit as itвЂ™s an online file sharing service URL.

But to your surprise, the message asks you to click a URL to get insights on the invoice and the due payment. You open the email which mentions that a payment is due and urgent payment is required. YouвЂ™re about to log off from the workstation but you receive an email from one of the vendors with a subject of: Pending Invoice.