What Is Double Barrel Phishing and Is It Dangerous?
Phishing has become a popular method that cybercriminals use to get their hands on people’s private data. But this scam doesn’t come in just one form. There are multiple kinds of phishing being used today, one of which is barrel phishing. So, what exactly is barrel phishing, and is it a risk to you?
What Is Barrel Phishing?
In a typical phishing scam, you’ll likely receive onemalicious email, text, or instant message from an attacker. But in a barrel phishing scam, two or more messages will be sent. Let’s consider a barrel phishing email attack to understand why this is the case.
If you ever receive a one-off, random email, you’re likely to either disregard it or think it suspicious. Cybercriminals have become aware of this, and are now often choosing to develop a phony rapport with their victims before swindling them. This is done by sending one or two benign, preliminary emails to the victim. This could be an alleged harmless individual introducing themselves, or an alleged organization notifying you of a development.
For example, one may receive an email from someone stating that they would like to interview you or offer you a job. Maybe they claim that they’ve seen thetarget’s LinkedIn profile, or that they’re from a company within their area of expertise. This first email will be harmless, though the intention is to get a reply from the victim.
If the victim does reply, the attacker may immediately request that they provide some information such as a CV, or they could provide the victim with a link to a website where they can supposedly apply. In either case, the requirement for data is there.
Alternatively, if the attacker wants to look as convincing as possible, they may even send one or two additional benign emails, possibly describing this alleged job, the salary, expectations, etc. The more information that is given, the more legitimate the attacker looks to the target.
When it gets to the point that the attacker requests data from the victim, the theft element of the scam begins. You may be asked for their home address, email address, phone number, or other kinds of sensitive information. These can all be used to exploit the victim in one way or another, or could even be sold ontomalicious third parties on the dark web, which is a lot more common than many of us think.
In short, the most crucial element of a barrel phishing scam is trust. If an attacker gains the trust of the victim, then it’s usually already too late. But you may protect yourself from such risks when you’re online.
How to Protect Yourself From a Barrel Phishing Scam
The first thing you should do whenever you receive an email or text from a new or unknown sender is take a look at their details. For example, if an alleged government organization texts you, but the number is personal, consider this a red flag. Or, if you receive a message from a “legitimate” account on social media, take a look at their page to see if they have any kind of established follower base or even a verification tick.
Social media scamsare becoming ever more popular, with phishing being a particularly popular tactic in the venture.
Additionally, if you’ve received an email, text, or message from someone requesting you provide information via a link,do not click on that linkuntil you have confirmed it is safe. Phishing scams often rely on directing victims to phishing sites that steal any data that is provided. So, use alink-checking websitebefore clicking on any links to keep yourself safe.
You could also get in touch with the organization that claims to be contacting you via the official contact details that you find online. If they state that no one from the company has contacted you, then it’s highly likely you’re being targeted by a scammer.
Barrel Phishing Can Be Missed: Stay Vigilant
Because barrel phishing plays on one’s trust, it can be all too easy to be tricked into divulging private information to a malicious party. This is why it’s important to vet every new communication you get to ensure it is legitimate and harmless. With the sheer number of different phishing scams out there today, it never hurts to take a few precautionary steps before providing anyone with your information.
Phishing is a bigger threat than ever before, thanks to Phishing as a Service (PaaS). So what is PaaS and how can you stay safe?
Freeing up vital memory on Windows only takes a moment, and your computer will feel much faster once you’re done.
Not all true crime is about hacking, slashing, and gore.
Some subscriptions are worth the recurring cost, but not these ones.
When your rival has to bail out your assistant.
My foolproof plan is to use Windows 10 until 2030, with the latest security updates.
