Jay Thakkar / via The Ssl Store / Nov. 25, 2019

Hackers use familiar brands like Dropbox to steal login credentials and spread malware

It’s funny how hackers, phishers, and scamsters can be blatantly obvious and inexplicably unpredictable at the same time. I’m saying obvious because they target the most widely used services/platforms and lots of users know what they’re up to — not just security professionals, but many ordinary users know about these phishing scams and what to look for. Phishers might be predictable in going after big names but it’s the unpredictability in their approaches that makes them tick. Time after time, they come up with new ways that help them achieve exactly what they want and make them “successful.” The Dropbox phishing scam is a perfect illustration of this.

The Dropbox phishing scam surfaced around a year ago and made headlines in many popular publications. It hasn’t gotten as much attention recently, but even after a year, attackers are still targeting users using this same-old trick. And therefore, you need to know about it.

Let’s hash it out.

Dropbox Phishing: It All Starts with a Simple Email This is how it all starts: You receive an email (either text or HTML-based) from a person saying they have shared an important document with you. The email looks a lot like an official Dropbox email and has a link to access the document. To make it look authentic, some of these emails include actual links to Dropbox in the footer of the email. These are links to Dropbox’s Terms of Service, Privacy Policy, and Help Center.

Continue reading here: Dropbox Phishing Scam: Don’t Get Fooled by Fake Shared Documents