I am personally a sucker for emails notifying me of voicemails.
It all started years ago when I signed up for the new Google Voice service (it was that long ago). I had recently moved to the Texas Hill Country from Houston and wanted to have an easy-to-remember Houston phone number for all my contacts in Houston. So I created a new phone number with Google Voice. I configured the app on my cell phone so that I would see calls when they came in, or get notified when voicemails were left.
And over time, I moved away from Android devices and into the Apple ecosystem. But I never decommissioned the number. I would occasionally get emails notifying me of voicemails, and would get so excited to go hear it. And it was also either road noise or just dead air, usually only about 5 seconds long.
Fast forward a lot of years. I still get those notifications from Google for voicemails at that old number. But more frequently I get emails from all sorts of other senders about voicemails – and none of them are real. But because of that training from years ago, I still knee-jerk to rush to listen to my new message.
Here is an example of one I got today. You’ll notice it looks a bit familiar – the “OneDrive” logo predominantly positioned at the top. I had to really think, “how would anyone post a voice message to my OneDrive?” Then I noticed the other tell-tale signs of a phishing email. Inconsistencies in the duration (in the subject vs. the body); some unrecognized URL in the link. And then there’s the odd random capitalization, such as in “Voice” in the first sentence. Of course, the “From” address was another big clue.
These are a few of the things you and your employees, associates and even family, should look out for to try to identify spam or phishing attempts. Had I clicked on this link, I probably would have been presented with a “OneDrive” login screen, and then the phishers would have captured the details to access my personal or business files located on my OneDrive storage.
Next time I get some notification about a voicemail, I will probably jump again, thinking someone left me a little nugget. But luckily, through my experience and training, I know what to look for to avoid any major impacts.
Monroy IT Services offers security awareness training for our customers. If you want more information, please visit us at www.monroyits.com.
Written by Emily Monroy