Contact forms are everywhere – no one puts email addresses on website because “people” just harvest those for spam/phishing campaigns – we have a contact form on this site.
Here is a description on the SANS Internet Storm Diary explaining how these scam attacks are carried. It is not very complicated but it is highly effective. Take a moment and read Brad’s article.
How the “Contact Forms” campaign tricks people – SANS
Time and time again I come back to training as an essential tool in every company’s cyber security toolbox. If you do not have a training scheme in place then you should speak to us.
Here is our contact form link again…
Clive Catton MSc (Cyber Security) – by-line and other articles