RAM Hand-to-Hand Couriers Email Scam
Upon reviewing the email from "RAM Hand-to-Hand Couriers," it became clear that it is fraudulent. This email attempts to lure recipients to a phishing website by falsely claiming that their shipment is subject to customs duties.
It's important to emphasize that all assertions made in the email are untrue, and it has no affiliation with the authentic RAM Hand-to-Hand Couriers company. The spam email, often titled "Client #RL71097064" (subject may vary), asserts that the recipient's package contains items subject to customs duties, necessitating payment of these taxes before delivery. The email provides details regarding the shipment and its anticipated arrival date.
As previously stated, this email is fraudulent and bears no connection to the legitimate RAM Hand-to-Hand Couriers entity.
Clicking the "Send My Package…" button within the email leads to a redirect. At the time of investigation, the website to which this email redirected was inaccessible. It's important to note that this issue could potentially be rectified in future iterations of this campaign, where emails might redirect to a functional website.
Typically, websites promoted through spam emails aim to harvest login credentials. Emails are particularly attractive to scammers, serving as gateways to accounts and platforms associated with them.
To elaborate on the potential misuse, cybercriminals may hijack the identities of social account owners (e.g., emails, social media/networking, messengers, etc.) to solicit loans or donations from contacts, perpetrate scams, or disseminate malware.
Compromised financial accounts (e.g., online banking, e-commerce, digital wallets, etc.) can facilitate fraudulent transactions or unauthorized online purchases.
However, instead of resembling sign-in pages, phishing sites may masquerade as registration or other forms (e.g., for submitting shipping or payment details). These deceptive webpages target personally identifiable or financial information, such as names, addresses, contact details, debit/credit card numbers, etc.
What Should You Do if You Mistakenly Provided Credentials on a Phishing Page?
If you have mistakenly provided credentials on a phishing page, it's crucial to take immediate action to minimize the potential damage. Here's what you should do:
Change Your Passwords: Immediately change the password for the account you provided credentials for. Use a strong, unique password that includes a combination of letters, numbers, and special characters.
Check for Suspicious Activity: Review your account activity for any unauthorized transactions, changes to settings, or unusual behavior. If you notice anything suspicious, report it to the platform or service provider immediately.
Enable Two-Factor Authentication (2FA): Enable two-factor authentication wherever possible for added security. This adds an extra layer of protection by requiring a second form of verification, such as a code sent to your phone, in addition to your password.
Contact the Platform or Service Provider: Inform the platform or service provider about the phishing incident. They may be able to take steps to secure your account and prevent unauthorized access.
Report the Phishing Incident: Report the phishing page to the appropriate authorities, such as the Anti-Phishing Working Group (APWG) or the platform where the phishing page was hosted. Reporting the incident can help prevent others from falling victim to the same scam.
Monitor Your Accounts: Regularly monitor your accounts for any signs of unusual activity or unauthorized access. Stay vigilant for phishing emails or other suspicious communication attempting to gain further access to your accounts.
