Earlier this week, we wrote about a phishing email scam disguised as an official OCR audit communication from the U.S. Department of Health and Human Services (HHS). The email prompts recipients to click a link regarding possible inclusion in the HIPAA Privacy, Security, and Breach Rules Audit Program, and then directs people to a non-governmental website, marketing a firm’s cybersecurity services. There has since been more information uncovered about this scam. Here is what we now know:
At Paubox, our HIPAA compliant email service also includes robust email security, including state of the art phishing protection. We incurred no known incidents of our customers getting this scam email. We consider it a big red flag if email is sent from domains that have been recently purchased, especially within ten days. Think about it: Receiving email from newly purchased domains like hhs-gov.us is a big tip off that it's likely a scam.
Jeremiah Grossman, Chief of Security Strategy at SentinelOne, adds: “Security controls protecting data breaches don’t have to be expensive or even sophisticated, but they do have to be intelligent and increase visibility. As we can see, something as simple and effective as monitoring the age of the domain names of incoming email can provide telltale signs of a phishing scam.”
We believe that companies that provide domain name services, like GoDaddy, should require their customers to provide more proof of identity when purchasing domains. This is even more important with domains ending in .us. Did you know there are even companies that allow automated, bulk purchasing of domain names? With the amount of damage phishing, malware and ransomware attacks do, we see little reason why purchasing a domain name in 2017 should be allowed to remain so easy to do, with little or no proof of identity, or human interaction required.
SEE RELATED: Phishing Alert, Fake OCR Email Making the Rounds