--- title: Phishing alert for the Northeast! Be on the lookout. description: A phishing attack has been seeing a good level of success catching victims in Northern NY, VT and other parts of the northeast. image: https://blog.twinstate.com/hubfs/Phishing%20email%20_%20sharepoint%20file.png --- ![Making MFA convenient ISS Wave](https://blog.twinstate.com/hs-fs/hubfs/website-header-texturepng-01.png?width=300&name=website-header-texturepng-01.png) [Alissa Momot](https://blog.twinstate.com/author/alissa-momot)Mar 30, 2022 6:11:36 PM1 min read # Phishing alert for the Northeast! Be on the lookout. [Previous ](https://blog.twinstate.com/5-tips-to-make-mfa-more-convenient) [Next ](https://blog.twinstate.com/boost-your-small-business-efficiency-5-reasons-to-implement-active-directory) ## A phishing scam is hitting Northeast businesses Be on the lookout! A [phishing scam](https://www.twinstate.com/ultimate-guide-cyber-threats#phishing) is setting bait using a SharePoint File share link. The phishing email is typically sent from a familiar contact and looks like the below: ![Phishing email _ sharepoint file](https://blog.twinstate.com/hs-fs/hubfs/Phishing%20email%20_%20sharepoint%20file.png?width=598&name=Phishing%20email%20_%20sharepoint%20file.png) When you click on the link it brings you to a phishing page that likely looks like the below: ![Phishing scam adobe](https://blog.twinstate.com/hs-fs/hubfs/Phishing%20scam%20adobe.png?width=562&name=Phishing%20scam%20adobe.png) This looks pretty legit - but it isn't. When you fall victim to the attack (you sign in with O365, OWA or other mail) - the hacker will then have your login credentials and access to your email, and your contacts. They have been known to search through emails, but primarily using the compromised accounts as a vehicle to continue spreading their mayhem. ### If you have fallen victim to the attack, here's some steps to take: 1. Change your password immediately 2. Contact your IT provider 3. Call your contact list and let them know that your email had been compromised and advise them not to click on the link from the email. If they clicked on it, advise them to take the same steps you have. It's likely that their contact list has also been compromised 4. Implement a [Multifactor Authentication Solution](https://blog.twinstate.com/whats-multifactor-authentication) to help secure your email and other accounts`   A friendly reminder that if you aren't expecting an email or a link from someone to call and validate that the link is legitimate. And implement a [cybersecurity awareness](https://blog.twinstate.com/cyber-awareness-training-basics) program to help your team identify malicious attacks before disaster strikes. --- As always, Twinstate Technologies is here to help. Contact us for help at [hello@twinstate.com](mailto:hello@twinstate.com) or call us at 800.833.8000.    ![avatar](https://app.hubspot.com/settings/avatar/4e93198cfd9f1ea3c0b7ced4c6a40bfe) [Alissa Momot ](https://blog.twinstate.com/author/alissa-momot) [mailto:Alissa_Momot@twinstate.com](mailto:Alissa_Momot@twinstate.com) COMMENTS ## RELATED ARTICLES ```json { "@context" : "https://schema.org", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "United States", "addressLocality" : "Morrisonville", "addressRegion" : "NY", "postalCode" : "12962", "streetAddress" : "291 Rand Hill Road" }, "knowsLanguage" : "en", "logo" : { "@type" : "ImageObject", "url" : "https://web.twinstate.com/hubfs/Twinstate_March2020%20Theme/images/logo.svg" }, "name" : "Twinstate Technologies", "url" : "https://blog.twinstate.com/phishing-alert-for-the-northeast-be-on-the-lookout" } ``` ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "abstract" : "A phishing attack has been seeing a good level of success catching victims in Northern NY, VT and other parts of the northeast.", "author" : { "@type" : "Person", "name" : "Alissa Momot" }, "dateModified" : "", "datePublished" : "", "headline" : "Phishing alert for the Northeast! Be on the lookout.", "image" : "https://web.twinstate.com/hubfs/Phishing%20email%20_%20sharepoint%20file.png", "inLanguage" : "en", "keywords" : "[Cybersecurity, phishing]", "mainEntityOfPage" : { "@type" : "WebPage" }, "name" : "Phishing alert for the Northeast! Be on the lookout.", "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://web.twinstate.com/hubfs/Twinstate_March2020%20Theme/images/logo.svg" }, "name" : "Twinstate Technologies" }, "text" : "A phishing scam is hitting Northeast businesses Be on the lookout! A phishing scam is setting bait using a SharePoint File share link. The phishing email is typically sent from a familiar contact and looks like the below: When you click on the link it brings you to a phishing page that likely looks like the below: This looks pretty legit - but it isn't. When you fall victim to the attack (you sign in with O365, OWA or other mail) - the hacker will then have your login credentials and access to your email, and your contacts. They have been known to search through emails, but primarily using the compromised accounts as a vehicle to continue spreading their mayhem. If you have fallen victim to the attack, here's some steps to take: Change your password immediately Contact your IT provider Call your contact list and let them know that your email had been compromised and advise them not to click on the link from the email. If they clicked on it, advise them to take the same steps you have. It's likely that their contact list has also been compromised Implement a Multifactor Authentication Solution to help secure your email and other accounts` A friendly reminder that if you aren't expecting an email or a link from someone to call and validate that the link is legitimate. And implement a cybersecurity awareness program to help your team identify malicious attacks before disaster strikes. As always, Twinstate Technologies is here to help. Contact us for help at hello@twinstate.com or call us at 800.833.8000.", "url" : "https://blog.twinstate.com/phishing-alert-for-the-northeast-be-on-the-lookout", "wordCount" : "451" } ``` ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Alissa Momot", "url" : "https://blog.twinstate.com/author/alissa-momot" }, "dateModified" : "2022-03-30T22:11:36.348Z", "datePublished" : "2022-03-30T22:11:36.000Z", "headline" : "Phishing alert for the Northeast! Be on the lookout.", "image" : [ "https://blog.twinstate.com/hubfs/Phishing%20email%20_%20sharepoint%20file.png" ], "mainEntityOfPage" : { "@id" : "https://blog.twinstate.com/phishing-alert-for-the-northeast-be-on-the-lookout", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.twinstate.com/hubfs/Twinstate_March2020%20Theme/images/logo.svg" }, "name" : "Twinstate Technologies" } } ``` ```json { "@context" : "http://www.schema.org", "@type" : "LocalBusiness", "address" : { "@type" : "PostalAddress", "addressCountry" : "United States", "addressLocality" : "Plattsburgh", "addressRegion" : "NY", "postalCode" : "12962", "streetAddress" : "291 Rand Hill Rd" }, "contactPoint" : { "@type" : "ContactPoint", "contactType" : "customer service", "telephone" : "+1-518-563-7100" }, "image" : "itemscope itemtype=http://schema.org/ImageObject", "name" : "Twinstate Technologies", "openingHours" : "Mo, Tu, We, Th, Fr 08:00-17:00", "priceRange" : "Telecommunications, IT and cybersecurity", "url" : "https://www.twinstate.com/" } ``` ```json { "@context" : "http://www.schema.org", "@type" : "LocalBusiness", "address" : { "@type" : "PostalAddress", "addressCountry" : "United States", "addressLocality" : "Colchester", "addressRegion" : "VT", "postalCode" : "05446", "streetAddress" : "59 Rathe Rd Suite #105" }, "contactPoint" : { "@type" : "ContactPoint", "contactType" : "customer service", "telephone" : "+1-802-655-7300" }, "image" : "itemscope itemtype=http://schema.org/ImageObject", "name" : "Twinstate Technologies", "openingHours" : "Mo, Tu, We, Th, Fr 08:00-17:00", "url" : "https://www.twinstate.com/" } ``` ```json { "@context" : "http://www.schema.org", "@type" : "LocalBusiness", "address" : { "@type" : "PostalAddress", "addressCountry" : "United States", "addressLocality" : "Concord", "addressRegion" : "NH", "postalCode" : "03301", "streetAddress" : "128E Hall Street" }, "contactPoint" : { "@type" : "ContactPoint", "contactType" : "customer service", "telephone" : "+1-603-230-9598" }, "name" : "Twinstate Technologies", "openingHours" : "Mo, Tu, We, Th, Fr 08:00-17:00", "url" : "https://www.twinstate.com/" } ``` ```json { "@context" : "http://www.schema.org", "@type" : "LocalBusiness", "address" : { "@type" : "PostalAddress", "addressCountry" : "United States", "addressLocality" : "Latham", "addressRegion" : "NY", "postalCode" : "12110", "streetAddress" : "" }, "contactPoint" : { "@type" : "ContactPoint", "contactType" : "customer service", "telephone" : "+1-518-783-0912" }, "image" : "itemscope itemtype=http://schema.org/ImageObject", "name" : "Twinstate Technologies", "openingHours" : "Mo, Tu, We, Th, Fr 08:00-17:00", "url" : "https://www.twinstate.com/" } ``` ```json { "@context" : "http://schema.org", "@type" : "Corporation", "alternateName" : "Twinstate", "contactPoint" : { "@type" : "ContactPoint", "areaServed" : "US", "availableLanguage" : "English", "contactOption" : "TollFree", "contactType" : "customer service", "telephone" : "+18008338000" }, "logo" : "https://www.twinstate.com/hubfs/RevAcc/Marketing/Brand%20Twinstate/50th%20Anniversary/Logo_50thAnn_BlackBG.png", "name" : "Twinstate Technologies", "url" : "https://www.twinstate.com" } ``` ```json { "@context" : "http://schema.org", "@type" : "Corporation", "alternateName" : "TwinState/Voice.Data.Video.Inc.", "logo" : "https://www.twinstate.com/hubfs/Assets/logo-twinstate-black-text.png?t=1534937469161", "name" : "Twinstate Technologies", "sameAs" : [ "https://www.facebook.com/TwinstateTechnologies", "https://www.twitter.com/_Twinstate", "https://www.linkedin.com/company/twinstate-technologies" ], "url" : "https://www.twinstate.com" } ``` ```json { "@context" : "http://schema.org/", "@type" : "WebSite", "alternateName" : "TWINSTATE//VOICE.DATA.VIDEO.INC", "name" : "Twinstate Technologies", "potentialAction" : { "@type" : "SearchAction", "query-input" : "required name=search_term_string", "target" : "https://www.twinstate.com/search?q=){search_term_string}" }, "url" : "https://www.twinstate.com" } ```