Common Phishing Subject Line Themes

Your session expired. Click here to sign in again. / Your Account has Expired.

The goal is to trick you into clicking a link that leads to an imposter site where the attacker hopes you will enter your login information.

You must make an urgent payment. /  Your account is being charged for a potentially fraudulent transaction.

Again, the goal is to trick you into clicking a link that leads to an imposter site where the attacker hopes you will enter your login information.

Due to {insert global catastrophe or high profile event).

Cybercriminals look to capitalize on high profile events such as earthquake/hurricane relief by setting up sham donation sites.  They also look to leverage large sporting events or concerts by selling non-existent tickets.

Happy holidays

Holiday scams impersonating trusted brands often contain too-good-to-be-true offers.

Unable to process your tax return

Between February and April, you can count on cybercriminals trying to capitalize of the rush for everyone to file their taxes.  They often claim key information is missing from your return and provide a website for you to update the records.

How to protect yourself

• Carefully read the email. Don't be click happy.
• Check if the email address matches the real domain.
• Be cautious of unexpected emails from a bank, vendor, or any other organization.
• Urgent or threatening emails should raise red flags.
• Offers that appear too good to be true usually are too good to be true.

Source: ESET