Spoofing is done by a scammer hoping they will be seen as a trusted source. The criminal disguises their identity in an email, text message, phone number or URL. Spoofing can be done with phishing attacks--scams to get sensitive information, gain access, steal data, money or spread malware. Businesses must be very careful, as a spoofing attack can lead to a ransomware attack or damaging and costly data breaches.
Scammers will stop at nothing to get your information. Always be mindful about what you open on your phone and computer. Read everything carefully and make sure everything makes sense. When in doubt, delete it. It only takes one mistake to open up the door that will give them access to personal/business information and your hard-earned money.
Here are some different types of spoofing:
Caller ID Spoofing – phone calls may look like they are coming from a certain number, from a big trusted organization, bank or customer support, and they are not. This is done in order to obtain sensitive information such as account information, social security numbers, passwords, etc.. Scammers even try to use the first few digits of your phone number as well as your area code to make it look like the call is local and coming from your area therefore making it more likely you will pick up the call.
Email Spoofing – an email message is sent with a false sender address and is used to trick a recipient into believing it came from a known source, but may include links to attachments infected with malware or malicious websites with a malware download or a faked login page for the purpose of getting your username and password. They may also use social engineering in order to get the recipient to disclose sensitive information. Email spoofing can also include ransomware, adware cryptojackers or Trojans.
Text Message Spoofing – sending a text message with someone else’s phone number or sender ID that has a link to phishing sites or malware downloads. Scammers have taken advantage of the job market by posing as staffing agencies, directing recipients to job offers that are too good to be true - a free car included with the job position.
At Sierra Corporation we understand the importance of protecting your business data and other sensitive information. If you or someone you know has security concerns about their business and would like to know more about how our managed services can help your business stay protected against spoofing and other related attacks, please call (703) 847-3136 for a free 15-minute consultation.