“Here’s a similar recent scam, discovered by email security vendor Trustifi. It involved the creation of a fake website that mirrored the login page of an unnamed global provider of voice and email services. Employees at one of this providers’ customers were emailed a message asking them to log in and confirm their credentials. More than 200 usernames and passwords were captured in the scam. In an interview Zack Schwartz, Trustifi’s vice-president of business development, told me email security solutions that do context analysis on attachments and links are essential for defense. IT administrators also need to follow proper email hygiene procedures to eliminate their email systems from being used by hackers to send poisoned messages. That means using the DKIM, DMARC and SPF authorization and authentication protocols on domains to prevent spoofing.”