LOOK OUT FOR TRICKY SPEAR-PHISHING EMAILS


As of July 2019, a malware variant called TrickBot has compromised 250 million email accounts and is still prevalent now (Forbes). This malware is delivered via spear-phishing attacks. Spear-phishing is a type of phishing that is targeted towards a user based on information that could be gathered from social media, especially LinkedIn. 

TrickBot gets tricky by using trusted email addresses within an organization to spread. The emails containing TrickBot usually have a malicious attachment that users download and sometimes a link-based attempt. 

The threat actors perpetrating these attacks are playing off your emotions, as is extremely common. Some users have reported receiving an email seemingly from their organization that talks about their “termination.”  Another one making the rounds has the subject line “Our Meeting in [company] Office”. 

If you receive a suspicious email, do not click. Please reach out to the IT Support Center at 970-754-4357 (U.S.), 604-935-5500 (CAN) or itsupportcenter@vailresorts.com.