Scammers have started disguising phishing links as an "Unsubscribe from mailing list" button, warned Artem Sheikin, Deputy Chairman of the Council for the Development of the Digital Economy under the Federation Council. Instead of removing the address from the database, the user lands on a fake website.
Such a page may contain a form with names like "Unsubscribe Confirmation", "Spam Complaint", or "Remove Address from Database". However, instead of a simple confirmation, the person is asked to provide their name, phone number, email, and other personal data.
The information obtained can be used by attackers for new phishing emails, calls, and more convincing schemes. Such messages pose a particular danger to corporate mail: they help collect work addresses, positions, and contact information of employees.
A genuine unsubscribe usually does not require a phone number, passport data, or other sensitive information. Suspicious emails are best deleted or marked as spam, and the sender should be verified through the company's official website.
Read more on the topic:
- GTA VI fans lured into Telegram channels under the guise of tester recruitment
- Correspondence with a scammer is more dangerous than a call: messenger gives the swindler time to analyze
- "Panic button" on "Gosuslugi", self-ban on international calls: what's included in the second package of anti-fraud measures