This week we’ve found lots of phishing scams in which scammers are impersonating trusted brands, including Walmart, USPS, and Ace. Would you have been able to spot all these scams?  

Phishing Scams

Impersonating trusted brands, scammers send text messages and emails containing phishing links, attempting to trick you into clicking. They make up various excuses like free gifts, vouchers, account security issues, or bogus package deliveries to prompt you to click the links.

These links lead to phishing sites designed to record your personally identifiable information (PII), such as your email address, credit card number, and Social Security number. With these credentials, scammers can drain your bank account, steal your identity, or commit any number of other crimes. Below are some examples.

Walmart​ Halloween Scam

Halloween is around the corner! Many brands are having Halloween sales campaigns, but please be careful when you receive a promotional email. This week, scammers posed as Walmart and sent fake emails that said you’ve won a Dell Inspiron laptop in their Halloween giveaway campaign:

If you were to take the bait and click the button in the email, it would take you to a fake survey page that asks for your detailed personal information. However, all the data submitted will end up in scammers’ hands and be used for their own good. And of course, there’s NO gift.

Avoid Scam Sites for FREE

The truth is, there are lots of scams and scam sites on the internet and they’re getting harder to detect. For an easy and reliable method of detecting and avoiding scam sites, check out our free browser extension (Trend Micro ID Protection) and free mobile app (Trend Micro Check). 

Both ID Protection and Trend Micro Check can protect you against scams, phishing links, risky websites, and lots more! If you come across something dangerous online, you’ll be alerted in real time so you’ll know to stay well clear   

Besides emails, scammers also sent fake text messages in the name of Walmart, falsely claiming that you need to check the details of your Walmart support case:

• (<URL> <- Go to. *update* support case: BMD6NI8U)

If you click on the attached link, again, you will be taken to a fake survey page where you could end up exposing your PII. Don’t fall for the scam!

USPS Shipping Scam

In the past few weeks we’ve been reporting on fake USPS delivery text messages, and they don’t seem to be showing any signs of stopping:

• Hello, USPS reminds you that your package has arrived at the warehouse, but cannot be delivered due to incomplete address information. Please confirm your address in the link.    <URL>

The links in such emails will lead to fake USPS tracking pages. There you will be asked to fill out lots of personal data, and scammers could gain access to it. Don’t let them!

Sample fake USPS tracking page URLs (as of Oct 20, 2023):

• usps[.]uspkp[.]com
• usps[.]uspspsk[.]com
• uspostalcenter[.]vip
• usps[.]catchfire-parcel[.]com
• usps-way[.]top
• usps[.]mybusipos[.]com
• usps[.]drop-parcel[.]com
• usps[.]drop-pp[.]com
• usps[.]safetycenter[.]vip

Note: Double-check the web address — the only legitimate domain is usps.com.

Ace Craftsman Generator Email Scam

“You have won a Craftsman Generator!” If you’ve seen this email that instructs you to claim an Ace Craftsman Generator via the embedded button, DON’T click! Although free stuff is irresistible, the offer is too good to be true — the button will take you to a phishing page that could record all your PII. Watch out!

Tips to Stay Safe Online

• Double-check the sender’s mobile number and email address. Even if it seems legitimate, think twice before you take any action.    
• Never click on dubious links or attachments! Only go to official websites and apps to make purchases, update information, or track a package’s status.
• If you’ve accidentally revealed your PII somewhere, change your passwords immediately and inform your bank and/or other companies that scammers may contact them pretending to be you. 
• Check if any of your PII has been leaked and secure your social media accounts using Trend Micro ID Protection.   
• Finally, add an extra layer of protection to your devices with Trend Micro Maximum Security. Its Web Threat Protection, Ransomware Protection, Anti-phishing, and Anti-spam Protection will help you combat scams and cyberattacks.  

If you’ve found this article an interesting and/or helpful read, please SHARE it with friends and family to help keep the online community secure and protected. Also, please consider leaving a comment or LIKE below.