I’m a security expert – delete ‘compulsory’ email that steals your passwords with a single click

A SECURITY expert has warned against clicking on a common email that could actually steal your personal details.

Expert Roman Dedenok explained on the Kaspersky blog that a seemingly innocent email from HR can actually be dangerous.

1

Questionaire scams are a common phishing tactic.

They’re an easy way for cybercriminals to convince you to give away a lot of information with the promise of a prize or the threat that it’s compulsory for your job.

Dedenok wrote: “Seemingly from HR, an email arrives containing an elaborate description of the employee self-evaluation procedure, which “promotes candid dialogue between staff members and their managers/supervisors.

“It goes on to say that ‘you can learn a lot about your strengths and shortcomings … to reflect on your successes, areas for development, and career objectives.’ All in all, quite a convincing piece of corporate spiel.”

The expert pointed out other red flags in the email.

He noted that you need to observe whether the domain name in the sender’s address is related to your company.

If there’s a time pressure put in the email this can also be a red flag.

Scammers hope you act without thinking and before your company can highlight the scam.

You should also look out for spelling and grammatical errors.

The type of questions you’re being asked may give the scam away.

If you’re being asked for details your employers already know, be concerned.

You also shouldn’t have to give out banking information in a simple company questionnaire.

If in doubt, contact your legitimate HR department before filling in the survey.

They should be able to tell you if the email is real and they could also warn others about a potential scam.

This post first appeared on Thesun.co.uk