September 10, 2024
This phishing email is designed to impersonate DocuSign, claiming that the recipient has a completed document ready for review. However, when the recipient clicks the "Preview Document" button, they are redirected to a credential-harvesting site.
This email falsely appears to be from the recipient's email service provider, pressuring them to click a link to retrieve undelivered mail. However, the link leads to a credential-harvesting page designed to steal their login information instead of providing the legitimate messages.
This phishing email is impersonating Wise, falsely claiming that the recipient's account has been closed. It invites the recipient to submit an appeal to reverse the account closure, but this call to action directs them to a credential-harvesting site.
This phishing email is impersonating MetaMask, falsely claiming there has been a login to the account from an unknown location. It urges the recipient to click a button to recover their account, but this link redirects to a credential-harvesting site.
Threat Insights is a weekly series where we present you with analysis from samples we collect. Follow us on social media for the latest feed and cybersecurity content. Stay informed and stay safe!
