Thursday, 11 February 2021

Phishing Scam Targeting PEXA Members

Law Mutual understands that a previously identified scam involving fraudulent WeTransfer emails purporting to be from PEXA has resurfaced.

PEXA advises that they do not use WeTransfer for any email correspondence or service.

If you receive an email appearing to be sent from PEXA via WeTransfer, do not click any links and delete immediately. 

If you have received one of these emails and clicked on the link, report it to your IT provider and e-mail PEXA’s security team at security@pexa.com.au.

The full article is available on the link here. 

Phishing and suspicious emails risk management

1. Ensure users can recognise the characteristics of suspicious emails (e.g. odd URLs or language, urgency, directions to transfer funds). Use phishing tests to check users can be trusted to report suspicious emails and not click on links or attachments.
2. Never reply to an email immediately. Take your time and reply in a considered manner providing the opportunity to correct the email or have second thoughts as to the security of the recipient. Fraudsters often use urgent requests to panic recipients into thinking they must respond quickly.
3. Beware of emails and requests that are badly spelled, grammatically incorrect or use idiomatic phrases and expressions that sound as if they have been translated by someone for whom English is not their first language.
4. Do not redirect or forward emails from an office email account (which might be a secure account) to an external or personal email account such as Hotmail or Gmail. This is not only insecure but could have data protection implications as well.

Law Mutual (WA) insured practices are reminded that losses as a result of cybercrime may not be covered under the Law Mutual (WA) Professional Indemnity insurance arrangements; cover will depend upon the facts of each individual case.