Beware of Spam/Phishing Emails

I want to make everyone aware of phishing emails purportedly coming from Jan Daub, the president of the USCA. While these have been appearing for some time it seems they may be increasing or coming to more USCA members. While it is not dangerous to open the email itself you do not want to reply, or click on any links, or call any phone numbers referenced. They could take you to some dangerous places you really don't want to explore. If you receive any questionable emails please let me know and forward the emails to me so I can look at them and determine any common sources or frequency. 

A common thread in these phishing emails is a sense of urgency for you to reply by email. If Jan really needs you to do something I'm sure he can find your phone number and call you! Don't reply to the email. 

If you look carefully at the 'from' address they do not appear to be using his full formal email address, but something that looks similar. Here are a few examples of some of the emails: 

Hi,

I need you to get something sorted out as soon as possible, Let me know if you are available now?

Regards,
Jan Daub

Hi,

I would like to know if you can make a purchase ASAP at the store nearest to you, I plan to surprise some of our boards with gift cards, let me know if you can make the purchase now with your personal funds and I will pay you back tomorrow. I want this to be kept private until they receive the gift cards. Please Let me know.

Waiting for your reply

Regards,
Jan Daub

Again, if there is any question about the content of the email it is better to ask me first before you reply. And send me any questionable emails you might receive. 

Jerry 
Webmaster
admin@sidecar.com

PS. Here is a definition and explanation of phishing email (Source: https://www.malwarebytes.com/cybersecurity/basics/phishing-email):  

What is a phishing email?

A phishing email is a fraudulent message crafted to trick recipients into revealing sensitive information like passwords or credit card numbers. These emails often imitate legitimate sources, like banks or popular websites, to appear credible. They aim to exploit a person’s trust in these institutions, persuading them to provide personal information, clicking on malicious links, or download attachments containing malware.

How to recognize a phishing email?

Key indicators of phishing emails include generic greetings, spelling and grammar mistakes (although not always), and urgent or threatening language that pressures the recipient to act quickly.

Suspicious links or attachments and sender email addresses that don’t match the legitimate organization they claim to represent are also telltale signs. Additionally, requests for sensitive information, which legitimate organizations typically won’t ask for via email, are a red flag.

Examples of phishing emails

Some well-known examples of these scams include a PayPal phishing attack, an IRS scam, and a Google Docs scam, each of which employs distinct tactics to deceive targets:

1. PayPal phishing attack: This scam involves emails that appear to come from PayPal, often with convincing logos and formatting. The emails usually claim there’s an issue with the recipient’s account and asks them to click a link to verify or update their account information. The link leads to a fake PayPal website designed to look authentic, where victims unknowingly enter their login credentials, which are then stolen by the scammers.
2. IRS scam: In this phishing attack, individuals receive emails that seemingly come from the United States Internal Revenue Service (IRS). The emails often create a sense of urgency, claiming that there’s an issue with the recipient’s taxes or tax return. They typically ask for personal and financial information, under the guise of resolving the issue. However, the IRS does not initiate contact with taxpayers via email to request personal or financial information.
3. Google Docs scam: This scam involves emails that invite recipients to view a document on Google Docs. The email might appear to come from someone the person knows, which is part of the deception. Clicking the link in the email does not lead to a real Google Docs page but rather to a malicious website which may be designed to steal Google account credentials or install malware on the victim’s computer.

In all these cases, the common thread is the use of deceptive emails that mimic legitimate sources to trick individuals into giving away sensitive information. It’s crucial to be vigilant and scrutinize emails for authenticity, especially when they request personal information or direct the recipient to an external website.

Why are phishing emails dangerous?

The dangers of phishing emails are significant. They can lead to identity theft, financial loss, and malware infections. Victims may face unauthorized transactions, loss of control over personal accounts, and long-term damage to their credit score. The personal impact of these threats includes stress, loss of privacy, and potential legal issues if one’s identity is used for illegal activities.

What happens if you open a phishing email?

Opening a phishing email itself is generally not enough to compromise your computer with viruses or malware. These malicious elements are usually triggered when you download an attachment or click on a link within the email. However, opening the email can alert the sender that your email address is active, potentially leading to more phishing attempts. It’s crucial to remain vigilant and avoid interacting with any suspicious content within such emails.

What happens if you answer a phishing email?

Responding to phishing emails is risky for several clear reasons. Even if you know it’s a fake email, replying can lead to more trouble. Most phishing attacks are run automatically, and when you respond, it puts you on the scammer’s radar. Remember, these cybercriminals are often involved in illegal activities and can be harmful.

Firstly, if you reply to a phishing email, you accidentally give the scammer your personal or your company’s email signature. This signature usually includes phone numbers and other details, which the scammer can use to make more convincing fake emails to trick you and others.

Secondly, when you reply, it tells the scammer that your email is in use. This makes you a bigger target for future scams. Your email address might even be sold to other cybercriminals.

Lastly, your email’s technical details can give away your location. This means scammers can figure out where you are, which adds to the risk.