blog conviso

Phishing scam using Conviso's name: don't fall for it!

In the past days, a few customers have reported to us that they have been receiving phishing emails from scammers using Conviso’s name.

November 25, 2020

By

Julliana Bauer

Phishing scam using Conviso's name: don't fall for it!

In the past few days, a few customers have reported to us that they have been receiving phishing emails from scammers using Conviso’s name. In this type of fraud, the scammer tries to obtain a user's personal and financial data, through the combined use of technical means and social engineering.

From what we have seen, in this particular case, the scammers' strategy is to try to capture the developers’ passwords to send an email structurally similar to ours and offer a training. In the message, a malicious link is inserted as a bait, and by clicking on it, the victim's data is dangerously exposed.

Ironic as it is that criminals have chosen an application security company to carry out their scams, it is an important reminder that no company is immune from similar attacks.

Phishing is one of the most common scams in the world

Phishing is a social engineering resource that creates “baits” to attract potential victims. If you receive one of these emails misusing the name Conviso, be sure to notify us about it by writing an email to security@convisoappsec.com.

Sobre o autor

Julliana Bauer

Bachelor's degree in Computer Science from the Federal University of Alagoas. He has spoken at events such as the NullByte Security Conference and Hackers to Hackers Conference, and presented research projects at national and international events. He has experience in application security, exploit development, and vulnerability research in both userland and kernel land, having discovered vulnerabilities for companies like Microsoft, AMD, and Intel. His interests include operating system internals, compilers, malware development, vulnerability research, and EDR evasion.

Saiba mais