Phishing Emails Pose as Dropbox Share Alerts

  
     
Scammers have a created a new con, and this can my be coming to your inbox soon. If you are a Dropbox user, you should read this scam alert.
April 29, 2016

This convincing phishing con poses as Dropbox and lures victims into clicking on a malware-infected email. If you use this file sharing service at home or work, check your Dropbox emails carefully before clicking on an infected link. 

How the Scam Works:

You receive an email that appears to come from Dropbox. The message looks real. It has the Dropbox logo and colors, and the subject line seems legitimate. Some variations include: "Drop Box - Pending Documents" or "<Contact Name> used Dropbox to share a file with you." The body of the message instructs you to click a link and access the shared file. An example is below. 

Don't fall for it! The link downloads malware to your device, which scammers use to capture passwords or hunt for sensitive information on your machine. 

 

How to Spot a Phishing Scam:

  • Be wary of unexpected emails that contain links or attachments. Do not click on links or open files in unfamiliar emails.
  • Check the reply email address. One easy way to spot an email scam is to look at the reply email. The address should be on a company domain, such a jsmith@company.com.
  •  Don't believe what you see. Just because an email looks real, doesn't mean it is. Scammers can fake anything from a company logo to the "Sent" email address. 
  • Consider how the organization normally contacts you. If an organization normally reaches you by mail, be suspicious if you suddenly start receiving emails or text messages without ever opting in to the new communications.  
  • Be cautious of generic emails. Scammers try to cast a wide net by including little or no specific information in their fake emails. Be especially wary of messages you have not subscribed to or companies you have never done business with in the past.  

 

For More Information

Learn more about phishing scams and how to stay secure while using Dropbox. To find out more about other scams, check out BBB Scam Stopper (bbb.org/scam). To report a scam, go to BBB Scam Tracker (bbb.org/scamtracker).