SCAM OF THE WEEK: Phishing Attacks Using Employee Benefits and Pay Raises as Bait
The bad guys know that annual pay raises and employee benefit enrollments often happen at the end of the year, or at the beginning of a new year. That's why they take this time to send phishing emails related to these types of communication.
These scammers pose as your HR department and send emails about things such as employee benefits surveys and salary increases. These emails typically contain dangerous attachments or malicious links that take you to a fake login page where your login information could be stolen.
If you receive emails about employee benefits or pay raises, do not click on links or open attachments. Even if the email appears to be from someone in your Human Resources department. It's best to play it safe. Pick up the phone and contact your HR team to confirm the email is valid.
Stop, Look, and Think. Don't be fooled.
The KnowBe4 Security Team