Back to Email phishing

Email phishing

The UPS Store data breach caused by a phishing incident.

On January 21, 2020, The UPS Store, the world's largest franchiser of retail shipping, released a data breach notice stating that an unauthorized attacker accessed some of the company’s email accounts containing customers' personal information via a phishing attack.

What happened.

Between September 29, 2019, and January 13, 2020, hackers had access to email accounts of some of The UPS Store locations. When the breach was discovered, the company immediately hired a third-party cybersecurity provider to investigate the incident and analyze the extent of the breach. Law enforcement authorities were also notified. With the help of the security expert, UPS is reviewing its existing security practices and strengthening them to avoid such incidents in the future. Though there has been no proof that the exposed personal information has been used in an unauthorized manner, the company is offering free credit monitoring and identity theft restoration services to affected customers for 24 months. 

Attackers usually resort to familiar, effective techniques, like phishing scams, to gain access to email accounts. A smart tool like Exchange Reporter Plus enables organizations to stay ahead of attackers by monitoring for and thwarting email-bound cybersecurity threats. Download a free, 60-day trial of Exchange Reporter Plus today.

How ManageEngine can help.

Exchange Reporter Plus provides a host of reports that can help you locate suspicious emails, both sent and received, based on keywords in their subject or body. Often times, these malicious emails appear to be valid, tricking users into opening the emails and clicking on links embedded in them, which can cause serious damage.

With Exchange Reporter Plus, you can locate emails based on:

  • Messages by subject keyword. Use reports to identify particular keywords in the email subject lines.
  • Messages by body keyword. Identify all the messages in your mailbox that have a particular keyword in the body of the email.
  • Attachment name. Get a report of all emails in your mailbox that have an attachment with a specific name. With the names of the malicious files, you can take the necessary steps to stop email-bound threats.
  • Attachment type. Based on an attachment’s file extension, you can spot malicious software.
  • The number of emails received from a specific domain, sender, department, or external email address. Get reports on all incoming emails from an external email address, a blacklisted sender or domain, or a specific department.

In addition, ManageEngine M365 Manager Plus provides an advanced Microsoft 365 mailbox content search capability that identifies phishing emails by analyzing internet message headers, subjects, attachments, and bodies of emails. With this feature, you can identify senders' email addresses, the platform used by the attackers, and the servers the emails passed through.

Start your free, 30-day trial of M365 Manager Plus today to try out all these features.

© 2022 Zoho Corporation Pvt. Ltd. All rights reserved.


Stay In The Know

Thank you

You will receive weekly cybersecurity news soon!

  • Please enter a business email id
    By clicking 'I'm Interested', you agree to processing of personal data according to the Privacy Policy.