Phishing Mail Report December 2024

1) Paypal

This phishing campaign does not contain the classic links normally found in phishing emails. Instead, it contains several call-back numbers that are supposedly to be used to complain about an incorrectly sent bill. Behind these numbers are expensive hotlines whose costs per minute can be very high, even if they are listed as free. In addition, attempts are made during the call to obtain the recipient’s access data.

It is noticeable that the emails are sent via the legitimate PayPal infrastructure, which makes the authentication of the message (DKIM, SPF, DMARC) appear correct and the IP addresses for sending match. Only the telephone numbers make it clear that this is a scam.

Example campaign

2) German Railways (DB)

Another phishing campaign focuses on an alleged refund for a ticket purchase. A clickable link in the text leads to a fake website where the fraudsters try to obtain the recipient’s access data.

Example campaign

3) ADAC

This campaign also claims to have detected unusual activity on an account. To clarify this, the recipient is asked to click on a link in the email. The design of the messages mimics the colors and logos of the ADAC.

Example campaign

4) Austrian Health Insurance Fund (ÖGK)

There are still large-scale phishing campaigns whose senders pretend to be the Austrian Health Insurance Fund (ÖGK). The official colors, design elements and symbols are used, which sometimes makes the emails look very authentic.

Example campaigns

Campaign 1

Campaign 2

Campaign 3

5) Other known phishing campaigns in December 2024

In addition to the campaigns mentioned above, there are several other large-scale and therefore noteworthy phishing attacks in December. Particularly noticeable are imitations of the following companies/portals, which you should watch out for:

• Lufthansa Miles & More
• Wise
• WeTransfer
• Strato AG
• ING Bank
• Netflix
• Docusign

Tips for recognizing and avoiding phishing

Phishing emails can look deceptively genuine – but with a little knowledge about phishing, you can protect yourself to a certain extent. Pay attention to the following tips to recognize fraudulent e-mails:

Check the URL carefully: Phishing websites use URLs that are similar to the original, but often contain minimal deviations.

Be careful with urgent requests: Reputable companies rarely request immediate action via e-mail links.

Contact customer service directly: If you have any doubts about an e-mail, contact the official customer service directly.

Do not pass on any personal data: Never enter sensitive information via links in emails.

Update your security software: Modern security software helps to block suspicious phishing websites.

Phishing remains a persistent threat, but with vigilance and the right protective measures, you can effectively protect yourself against it. Make sure you regularly check and update the security measures for your online accounts! Keep checking the monthly phishing report to keep track of all new campaigns.

Securely positioned with eXpurgate

Although phishing emails can often be recognized by certain characteristics, it is crucial for companies to rely on a reliable email security solution. Even with training for employees, there is a risk that not all suspicious messages will be recognized – especially in a stressful work environment where there is often not enough time to check every email thoroughly.

eXpurgate uses modern algorithms and machine learning to reliably identify potentially dangerous emails. With a detection rate of over 99.99% and the analysis of more than one billion emails a day, eXpurgate offers an exceptionally high level of protection.

Arrange a no-obligation consultation to find out more about how eXpurgate can effectively protect you against phishing attacks and other dangers in email traffic.