Hello, welcome to the Thursday, February 11th, 2021 edition of the Sandsenet Storms,

I'm Stomcast. My name is Johannes Ulrich. And today I'm recording from Jacksonville, Florida.

Diary today comes from Brad, who found a cute little fishing email. It actually was sent to our

handler email address. Yes, we do get

normal fishes too, and we always actually love it when people send us malware and fishing emails.

This one wasn't really all that remarkable, just a very common social engineering technique

where the attacker claims that the email arrives from your email

system, then asks you to either verify your identity or in this case clean up your email because

apparently you received too much, probably most of it spam. Anyway, as usual, Brad walks you

through what happens if you would click on an email

like this, including packet captures of the network traffic you would observe.

And talking about fishing, Google published some statistics about phishing attacks that

they're seeing in their network and, well, most popular target,

the United States, followed by the United Kingdom and Japan.

But part of this is also related to the overall size.

Australia, for example, receives twice the number ofishing emails per capita compared to the United States.

Also, having your email address being part of a large breach increases your chances substantially.

What surprised me a little bit is that attackers do actually target older people somewhat more than

younger people. Now, they're comparing here the age groups 55 through 64 and 18 to 24. Sort of

interesting that the attackers are actually able to target these mass spam and phishing emails.

Mobile users, interestingly, receive less attacks, so if you're exclusively using mobile devices.

But then again, this may also mean that you're not a very heavy internet user,

...