Phishing Attack Prevention

Indiatriks is aware of public reports of an ongoing phishing attack. At this time, this attack appears to be targeting PayPal, Bank of America, Lloyds, and TSB users. The attack arrives via an unsolicited email message containing an HTML attachment.

This attack is unlike common phishing attacks because it locally stores the malicious webpage rather than directing user to a phishing site via a URL. Many browsers utilize anti-phishing filters to help protect users against phishing attacks; this method of attack is able to bypass this security mechanism.

We encourages users and administrators to take the following measures to protect themselves from these types of phishing attacks:

* Do not follow unsolicited web links or attachments in email messages.
* Use caution when providing personal information online.
* Verify the legitimacy of the email by contacting the organization directly through a trusted contact method.
* Refer to the Recognizing and Avoiding Email Scams (pdf) document for more information on avoiding email scams.
* Refer to the Avoiding Social Engineering and Phishing Attacks document for more information on social engineering attacks.
* Refer to the Using Caution with Email Attachments Cyber Security Tip for more information on safely handling email attachments.