A comedy of email errors

“I needed a password eight characters long so I picked Snow White and the Seven Dwarves.” 

This was the winning joke from comedian Nick Helm at 2011’s Edinburgh Fringe Festival and possibly the closest that cybersec has ever come to being funny in mainstream comedy. So with the largest arts festival closing its doors for another year, we started to question the whimsy of our industry given the serious nature of threats we’re defending against.

Well, it turns out that if you do want to exercise your sense of humor, phishing scams are probably the way to go… we’ve all guffawed when a particularly haphazardly-written email has found its way through to our inboxes, and comedians Joe Lycett and James Veitch have taken things to the next level by replying to these phishing emails, entertaining audiences with the hilarity that ensued. 

So given it’s early September, and the entire office is in a post-holiday coma, we thought we’d break the monotony of the perpetual cyber doom media cycle and distract you with a few of our favorite ludicrous scams and subsequent responses. Enjoy. Do send us any we’ve missed. But watch out for real scams. And stay safe online! 

The ‘stuck in space’ scam

The ‘I can put this assassination on hold’ scam

The ‘Mark Zuckerberg is a philanthropist’ scam

And what follows is another Zuckerberg scam this time on behalf of special agent Willy Nicolas, with a response from comedian, Joe Lycett:

https://joelycettcomedy.tumblr.com/post/118285164968/i-replied-to-a-facebook-scam-so-you-dont-have-to?is_related_post=1

The ‘I’m dying in hospital and want to send you my life savings’ scam (Courtesy of Joe Lycett)

https://www.youtube.com/watch?v=sxavC4kju7w

The ‘lucrative business deal’ scam (Courtesy of James Veitch)

https://www.youtube.com/watch?v=_QdPW8JrYzQ

We can all have a laugh about email scams but only if we’re confident that our email domains are fully secured. If you need help implementing DMARC, the only definitive way to protect your email domain, please get in touch with a member of the team!

PUBLISHED BY

Red Sift

3 Sep. 2019

SHARE ARTICLE:

Categories

Recent Posts

VIEW ALL
BEC

What is email spoofing and how can you prevent it?

Faisal Misle

Executive summary: Email spoofing is a growing cyber threat where attackers forge the sender’s address to impersonate trusted sources, enabling phishing, business email compromise, and financial fraud. Because legacy email protocols like SMTP lack strong authentication, spoofing can bypass traditional filters. Organizations can mitigate this risk by implementing robust email authentication measures, especially DMARC.…

Read more
Email

What is social engineering and how can you prevent it?

Jack Lilley

Executive summary: Email phishing has evolved and criminals now use social engineering to impersonate executives, suppliers, and even government agencies, persuading recipients to approve payments or disclose credentials. Because human judgment sits at the heart of these attacks, technical controls that eliminate spoofed messages before they reach the inbox are essential. DMARC provides that…

Read more
Cybersecurity

Attackers are abusing Microsoft 365: Here’s how to stay protected

Jack Lilley

Executive summary: Varonis has surfaced an active phishing campaign that spoofs internal users by abusing Microsoft 365’s Direct Send feature. Because Direct Send doesn’t require authentication and is treated as “internal,” these messages often bypass the checks you rely on for outside mail. Microsoft now offers an opt-in switch, RejectDirectSend, to block the pathway,…

Read more
BEC

SVGs with JavaScript are bypassing traditional email security: Learn how to stay…

Jack Lilley

Executive summary: Hackers are hiding JavaScript inside SVG attachments that pass as harmless images, and slipping past Secure Email Gateways (SEGs). To stay secure, organizations need to enforce a DMARC policy of p=reject, easily implemented with Red Sift OnDMARC, to stop compromised SVGs before they reach the end user. Key takeaways: Scalable Vector Graphics…

Read more