“There is a high chance that your computer has been infected with a virus/trojan” – messages like this are increasingly appearing in the inboxes of Polish internet users. These alerts appear to come from popular email service providers, but in reality, they are sent by cybercriminals attempting to trick users into installing malicious software on their devices.
Phishing: A Growing Cyber Threat
Phishing remains one of the most widespread cyberattack methods. Cybercriminals use deceptive emails to manipulate victims into revealing sensitive data or installing malware. Despite its simple mechanics, phishing attacks often succeed, as criminals continuously develop new variations of these schemes.
Every day, over 3.4 billion phishing emails are sent worldwide.
Cybercriminals Posing as Security Providers
Phishing tactics exploit human emotions and psychological triggers. Attackers often create a false sense of security by impersonating trusted contacts or service providers. However, some phishing attempts take the opposite approach—instilling fear and panic in victims.
A new phishing scam targeting Polish users follows this second strategy.
- Attackers send emails claiming that the recipient’s account is being used to distribute malware.
- The email urges the recipient to install a “new authentication system”—a link to this fake security update is provided in the message.
- Clicking on the link leads to malware installation, rather than the security tool promised.
“Under no circumstances should recipients open the link,” warns Robert Dąbrowski, head of Fortinet’s engineering team in Poland.
“Users who fall for this scam will unknowingly download malicious software instead of the security tool they were ‘recommended.’”
Deceptive Tactics Used in the Attack
The fraudulent emails mimic the language of legitimate service providers to appear more credible.
- The message claims that the email provider will never ask for a password—a standard security warning used by real service providers.
- The email includes a request to report account hijacking attempts to an address listed in the message.
- The provided contact email is actually legitimate, directing users to the official support page of the real email service.
However, the scam can be identified by checking the sender’s email address, Dąbrowski explains:
- The sender’s email does not match the domain of the service it impersonates.
- Phishing emails are sent to users of various email providers, not just those of the impersonated service—meaning that some recipients don’t even have an account with the supposed sender.
Key Characteristics of Phishing Attacks
Since phishing attacks are so common, internet users must learn to recognize them and protect themselves. While phishing emails vary in style, most share several common features:
- Poor grammar and spelling errors – Many phishing emails contain awkward phrasing or grammatical mistakes, as attackers often use automated translation tools to write messages in different languages.
- Urgency and pressure – Scammers use time-sensitive threats, such as bank account breaches, to rush victims into making hasty decisions.
- Tip: If you receive a suspicious email, do not panic. Instead, contact the alleged sender (e.g., your bank) through official channels listed on their website.
- Fake sender addresses – The email address does not match the real company or service provider.
- Beware of subtle changes – for example, replacing the letter “O” with the number “0” to create a nearly identical-looking address.
How to Protect Yourself from Phishing
To combat phishing, users should use both technical security tools and awareness strategies:
- Enable spam filters to block suspicious emails.
- Use multi-factor authentication (MFA) to prevent unauthorized access to accounts.
- Verify sender addresses and links before clicking on them.
By combining security tools, best practices, and knowledge of cybercriminal tactics, users can greatly enhance their protection against phishing attacks.
Source: Manager Plus
