Phishing attacks
We want to stress the fact that there are phishing attacks ongoing that are targeting Icelandic companies and their employees - Please be careful and do not risk opening links or files that unless you are certain about the origin.
Main risks
- False / misleading Subject: An example could be "Invoice", "Receipt" or similar. Please look closely before opening any links or attachments. Often the emails are not including any text or the text might look abit off.
- Potentially harmful attachments and links / URL's: The email might contain what seems to be a valid Excel file (extension: .xlsx) but the attachment points to an external link / URL that requires you to log on. If you do log on then you are sharing your credentials with the attacker.
- Secure source / Sender: The mail you receive can look like it comes from a secure and known sender. Please be aware that that specific sender can be a victim of an attack and the attackers could be exploiting their emails or servers.
For further information, please visit the cert.is website, direct link : https://cert.is/frettasafn/svikaherferd-i-gegnum-vefpost/