Fake airline tickets catch out 90% of phishing targets

Ignore that unexpected airline email - you're not going anywhere, though your data may be

Phishing attacks designed to look like airline tickets catch out as many as 90% of their business targets, according to Barracuda Networks.

The security firm uncovered the specialist spin on standard phishing emails in its usual scans of customers' emails.

"We've seen this attack with several of our customers, especially in industries that deal with frequent shipping of goods or employee travel, such as logistics, shipping, and manufacturing," noted Asaf Cidon, vice president of content security services, in a blog post.

Advertisement - Article continues below

"Our analysis shows that for the airline phishing attack, attackers are successful over 90% of the time in getting employees to open airline impersonation emails," he added, though targets will need to open the attachment or click embedded links in order to be infected. "This is one of the highest success rates for phishing attacks."

The attack works so well because it combines multiple techniques, he said, starting with impersonation. "The attacker will either impersonate a travel agency or even an employee in HR or finance that is sending an airline ticket or e-ticket," Cidon said. "The email will be constructed to appear inconspicuous to the untrained recipient."

Using targeted research, the attacker selects a likely destination and airline that fit with what the company does or its location, he added.

Advertisement
Advertisement - Article continues below

The email will feature an attachment that appears to be a flight confirmation or receipt, perhaps in PDF or DOCX format. Once opened, the embedded malware kicks in. Some versions of the attack also include links, encouraging targets to click through to malicious pages that are designed to look like airline websites or travel booking systems.

Advertisement - Article continues below

"This step in the process is designed to trick the victim of the attack into entering corporate credentials into the site," Cidon said. "The attacker will then capture the credentials, and use them to infiltrate the corporate network and internal company systems, such as databases, email servers, and file servers."

What can companies do to avoid such attacks? Cidon advises companies to use sandboxing to prevent malware from ever reaching the corporate mail server, and using anti-phishing protection that scans links and looks for malicious code. And, as usual, training will help staff avoid being caught out.

Featured Resources

The case for a marketing content hub

Transform your digital marketing to deliver customer expectations

Download now

Fast, flexible and compliant e-signatures for global businesses

Be at the forefront of digital transformation with electronic signatures

Download now

Why CEOS should care about the move to SAP S/4HANA

And how they can accelerate business value

Download now

IT faces new security challenges in the wake of COVID-19

Beat the crisis by learning how to secure your network

Download now
Advertisement

Recommended

Visit/security/phishing/355810/zloader-malware-returns-as-a-coronavirus-phishing-scam
phishing

ZLoader malware returns as a coronavirus phishing scam

27 May 2020
Visit/security/hacking/355806/anarchygrabber-hack-steals-discord-tokens-ids-and-passwords
hacking

AnarchyGrabber hack steals Discord tokens, IDs and passwords

27 May 2020
Visit/security/hacking/355801/scammers-using-coronavirus-contact-tracing-in-hacking-attempt
hacking

Scammers leverage contact-tracing in hacking attempt

27 May 2020
Visit/security/phishing/355793/gitlab-phishes-its-remote-employees-and-1-in-5-fell-for-it
phishing

GitLab phished its employees and 20% handed over credentials

26 May 2020

Most Popular

Visit/infrastructure/server-storage/355785/dell-emc-poweredge-r7525-review-an-epyc-core-density-to-make
Server & storage

Dell EMC PowerEdge R7525 review: An EPYC core density to make Intel weep

26 May 2020
Visit/infrastructure/network-internet/355792/intel-releases-wi-fi-and-bluetooth-driver-updates-for
Network & Internet

Intel releases Wi-Fi and Bluetooth driver updates for Windows 10

26 May 2020
Visit/operating-systems/microsoft-windows/355781/microsoft-confirms-further-issues-with-troublesome
Microsoft Windows

Microsoft's latest Windows 10 update is causing yet more issues

26 May 2020