From: Mark Landress WB5ANN Oak Forest ARC

RE: Phishing email attacks on Ham clubs.

All, A phishing attack targeted to treasurers and officers of ham clubs is taking place in the Houston area.  A relatively convincing looking email with the name of one of the officers asking for money from the treasurer or secretary of the club is the focus of the attack.  The attacker is apparently using the club website emails and aliases and perhaps other personal data skimmed from radio websites or FCC databases to make the email request look convincing.  The substance of the email is typically a request for money transfers via Zelle, check or other method.   The request may ask for an acknowledgement, followed by an urgent request for check, account numbers, transfers and the like.   

The spoof header has the name or call of the officer as sender with the not well disguised email address of the phisher.    This should allow for a quick check that this is a fraudulent sender.  Those familiar with exposing the header in the email metadata can uncloak the email sources.

The email text at first glance is convincing enough that someone in a rush could get phished.   So far I am aware of phishing for officers of ECHO of and the Oak Forest club.  No doubt other ham or civic organizations will be targeted.   

I wanted to get this out quickly so the distribution list is not comprehensive. 

Everyone please alert their club officers and webmasters and forward this around as appropriate. 

I’m also thinking a post to QRZ scam forum might be appropriate.

Keep alert.  Mark WB5ANN