Welcome
About
News
Anonymous Reporting
Tools
MCA Chatter
Library
V-ID Terminal
Support
My Account

News

Icon representing US Coast Guard Bulletin: Cyber Adversaries Targeting Commercial Vessels
US Coast Guard Bulletin: Cyber Adversaries Targeting Commercial Vessels

June 21st 2019
Icon representing Would you pay $1m for a laptop full of malware?
Would you pay $1m for a laptop full of malware?

May 23rd 2019
Icon representing Singapore Opens Maritime Cybersecurity Operations Centre (MSOC)
Singapore Opens Maritime Cybersecurity Operations Centre (MSOC)

May 22nd 2019
 
 
 

Email Fraud Attempt

 
February 5th 2018
Repeat attack on previous reporter
A new Email Fraud Attempt was reported to us. This is an attempt on the same user who reported an incident in November 2017. 

The incident is as follows:

• A colleague in CAPELLEN, LUXEMBOURG was contacted through e-mail (see below) yesterday by a “lawyer” claiming the unpaid, third (fraudulent) invoice

• A typo was noticed in the sender’s e-mail domain name: lawyesrsan.com instead of lawyersan.com.

• The fraudulent domain name was registered only yesterday through an anonymizing domain name registrar in ITALY and was used against us the same day.

• The latter, legitimate domain name belongs to a law firm in LIMASSOL, CYPRUS.

• Before the “@” in the fraudulent e-mail address the real name of one of the partners of the legitimate law firm was used.

• In the fraudulent e-mail’s body text the real name and domain name of the legitimate firm were used.

Actions taken

• Fraudulent domain name was centrally blocked. The fraudsters will no longer be able to contact company staff through that domain.

• I informed the owners of the legitimate domain name of the name, domain name and brand name abuse and urged them to take action in order to get the fraudulent domain shut down asap.

• Informed CERT.be and CIRCL.lu

Once again the fraudsters have made considerable effort to make things look as realistic as possible.

START FRAUDULENT E-MAIL

From: A.Eraklis / Legal Adviser / [mailto:eraklis.agathokleous@lawyesrsan.com]
Sent: 17 January 2018 19:08
To: Client#65467LG-1 ASS; [REDACTED]
Subject: The right legal invoice is outstanding INV.77650008US - MV.XXXXXXXX
Importance: High


TO    :XXXXXXX
ATTN:Mr.[REDACTED] - FINANCE DEPT
REF  :MV .XXXXX - BILL NO.77650008US (OUTSTANDING INVOICE)

 

Good day,
Excuse him for this matter , But we talk as legal agents about Messrs "ASSLTD/GUARDS" for invoice unpaid no : 77650008US .

Please ask for help from your side and have the order to settle the invoice as soon as possible.

 
Best Regards
Mr.A Eraklis

Mr.Eraklis Agathokleous
Legal Adviser in Maritime Transport
www.lawyersan.com

END FRAUDULENT E-MAIL