Scams+Security : Email*Text*Calls*Internet*Crypto*Apps*Ads

Had a very similar one yesterday, again with 

hello <myname> it's Kim are you online at the moment ?

what nearly hooked me was Kim is my ex wifes name, but then I thought why would she email me when she could ring also the email address of gorinv918@gmail.com

Also, if the spelling you received really was 'Margeret', I would treat it as even more suspicious. 

Any genuine Margaret would know how to spell their name correctly.  

Must try that in future.

An idiot whose email address starts with a string of digits sends me spam most days, mostly repetitive. I must had more than 30, including four today, about the Camp Lejeune Justice Act of 2022. For it to be relevant to me, I must have, "... for not less than 30 days during the period beginning August 1, 1953, and ending December 31, 1987,[have been exposed]  to water at Camp Lejeune that was supplied by the United States".

Apparently spelling mistakes are a ploy, If you are reasonably intelligent as I assume most on here are, then we are likely to bin it however because they know that we are less likely to be taken in it means that they only tend to get any form of response from the other end of the scale, and these are the targets as they are more likely to be taken in by this.

The problem report@phishing.gov.uk is the lack of feedback, immediacy and the apparent inaction by the NCSC. If you are using Microsoft for your email then I would advise reading and acting this support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44. 

Due trading relationships between sister companies and Russia my employer and other members of the group have come under significant phishing attack. The site I manage has, since the beginning of sanctions, been seeing 10-15 different attacks a day with each one going to multiple users, previously it would be 4-5 a month. Using the Microsoft system, once a user makes a report it appears to be added to Microsoft's filters stopping the attack in its tracks, and generating admin reports identifying users already in receipt of similar emails.



Additionally I would never advise unsubscribing using the unsubscribe link unless you a 100% confident that you subscribed in the first place. Spam emails with unsubscribe links is a great way of verifying and harvesting active email addresses. The best way to deal with such emails is to mark them as spam and delete them, depending on your email reader/service this should ensure that future emails either aren't delivers or end up in Junk rather than your inbox. We used this attack senario in last quarter's phishing simulation in order to glean people's answers to security questions when attempting to recover their non-existant password in order to unsubcribe and yes there were people who fell for it and handed us not only their most commonly used passwords but also details of their mother's middle name and the name of their first pet.