Phishing Scams: How to Stay Safe from United Healthcare Impersonators
Phishing emails impersonating United Healthcare have been making the rounds, promising a free Oral-B toothbrush to unsuspecting victims. However, the real concern isn’t the toothbrush itself, but the link that comes with it. Meanwhile, these phishers have been using various tactics to hide their tracks, including Microsoft Azure Blob Storage and IPv6-mapped IPv4 addresses.
Understanding the Threat
Recently, we’ve seen a shift in the way these phishers operate. They’re now using links obfuscated by IPv6-mapped IPv4 addresses, making it harder to identify the true destination of the link. For example, a link like http://[::ffff:5111:8e14]/ may seem confusing, but it’s actually a valid and routable address.
Additionally, these addresses can be converted to IPv4 addresses, revealing the true destination of the link. In this case, the address 81.17.142.20 is the actual destination, which can be used to collect personally identifiable information (PII) and card data.
Staying Safe
To avoid falling victim to these scams, it’s essential to be cautious when clicking on links or providing personal information. If you’ve already entered your details, there are steps you can take to minimize the damage. Firstly, contact your bank or card issuer immediately and cancel the card. Secondly, dispute any unauthorized charges and change passwords for accounts linked to the email address you provided.
Other ways to stay safe include keeping your device and software up to date, using an up-to-date anti-malware solution with web protection enabled, and being wary of suspicious messages. If you’re unsure whether something is a scam, you can submit it to Malwarebytes Scam Guard for review.
Indicators of Compromise (IOCs)
The following IOCs have been identified as being associated with these phishing scams:
- 81.17.142.40
- 15.204.145.84
- redirectingherenow[.]com
- redirectofferid[.]pro
Finally, it’s crucial to remember that cybersecurity risks should never spread beyond a headline. If something looks dodgy to you, check if it’s a scam using Malwarebytes Scam Guard. Submit a screenshot, paste suspicious content, or share a link, text or phone number, and we’ll tell you if it’s a scam or legit.
Frequently Asked Questions
- What is the focus keyphrase of this article? The focus keyphrase is phishing scams.
- How can I stay safe from phishing scams? To stay safe, keep your device and software up to date, use an up-to-date anti-malware solution, and be wary of suspicious messages.
- What should I do if I’ve already entered my details? If you’ve already entered your details, contact your bank or card issuer immediately and cancel the card, dispute any unauthorized charges, and change passwords for accounts linked to the email address you provided.
- How can I identify a phishing scam? Be cautious of links or emails that ask for personal information, and never click on suspicious links or download attachments from unknown senders.
- What is Malwarebytes Scam Guard? Malwarebytes Scam Guard is a tool that helps detect scams and provides a safe way to submit suspicious content for review.
