Warning! The change password scam is back. Here’s how to avoid it

The change password scam is back

The change password scam has returned with a vengeance.

Have you received an email warning that your email or social media account password has “expired” and inviting you to follow a link to change it? If so, congratulations. You’re a target of the newest scam — and also one of the oldest in the book.

No one knows how common this particular form of online fraud is since it’s difficult to track. But phishing attacks, in general, are up from last year, according to a recent report from Wombat Security. These scams compromise billions of email accounts every year.

“The attacker can acquire a million email addresses for a price of a latte,” says Igor Baikalov, chief scientist at Securonix, a computer security firm.

I’ve received the emails, many of my media colleagues have, and chances are, you have too. Fortunately, most of them go directly to your spam box. But not all of them.

“This scam works simply because a significant part of the population is just naïve to the most basic of scams,” says Robert Siciliano, a security analyst with Hotspot Shield.

Change password scams are making a comeback because people are confused. But the goal is the same: Criminals want to get into your social media account, where their scams will target your friends. Fortunately, you can protect yourself with a few easy steps.

Why the change password scam is back

Scammers are getting smarter about their phishing excursions, and their timing is perfect. Uncertainty about Europe’s strict new privacy law, the General Data Protection Regulation (GDPR), plus several recent data breaches that have prompted companies to send legitimate “change password” requests, is confusing to consumers. Given all that’s happened, there’s a presumption that the emails are legitimate, even though many are not.

“We’ve seen several phishing scams cite the newly enacted GDPR as a reason to request information from targets, taking advantage of the confusion around these new regulations and the deluge of related emails that internet users are already receiving,” says Harold Li, a vice president, at ExpressVPN, a provider of virtual private networks.

Don’t let this password scam happen to you

Consider what happened to Stacy Caprio when she received a warning that her Facebook password needed to be updated. “I clicked the link to update it,” says Caprio, an internet marketer. “My account was hacked, and I had to go back in and change the password.”

Looking back, she says it was obviously a password heist. The scammers sent their illegitimate request to a newer email address that wasn’t even connected to her Facebook account.

Don’t blame Caprio. The change password scam is becoming so sophisticated that even professionals are having a hard time telling it apart from the real thing.

“The emails look real — very real,” says Morey Haber, chief technology officer at cybersecurity company BeyondTrust. “Most of the basic content is well-formed, there are no spelling or grammatical errors, and the hyperlinks and email addresses are cleverly spoofed to resemble their legitimate counterparts.”

How to avoid a change password phishing attack

While the bad guys are constantly reinventing the change password scam, the steps to prevent it remain the same. They include:

Use two-factor authentication on all your email and social media accounts. That way, even if criminals extract your password, they won’t get past the front door.

Review any emails that appear to come from Gmail, Yahoo, Microsoft or any social network. “Check the contents of the email and verify carefully,” says Mike Bradshaw, a partner at ConnectMarketing, a business-to-business marketing agency. “Look for any misspellings, grammatical errors, incorrect links or email addresses.”

Never click on any attachments that may come from a suspected spam threat, especially one requesting you to change passwords. “Question every email that is not a direct response from a request you’ve made,” says Leia Shilobod, CEO of InTech Solutions, an IT services company.

This is also a perfect time to check your antivirus software. A product like Norton can protect you from attachments that install malware on your computer. That, plus knowing how the “change password” scam works, why it’s back, and how to avoid it, will keep you out of trouble.

Underwritten by

Underwritten by Sodexo North America

Sodexo North America Sodexo North America is part of a global, Fortune 500 company with a presence in 80 countries. Sodexo is a leading provider of integrated food, facilities management and other services that enhance organizational performance, contribute to local communities and improve quality of life for millions of customers in corporate, education, healthcare, senior living, sports and leisure, government and other environments daily. Learn more at Sodexoinsights.com.

Underwritten by Travelex Insurance Services

Travelex Insurance Services is a leading travel insurance provider in the United States with over 55 years combined industry expertise of helping people dream, explore and travel with confidence. We offer comprehensive travel insurance plans with optional upgrades allowing travelers to customize the plans to fit their needs. Compare plans, get a quote and buy online at Travelexinsurance.com.

Underwritten by AirHelp

AirHelp is the world’s leading flight delays compensation company, helping passengers apply for compensation following a delayed or canceled flight or when boarding has been denied. It is AirHelp’s mission to fight for passenger rights by holding airlines accountable for flights disruptions that are out of passengers’ control. AirHelp has already helped 5 million people, taking the stress out of applying for compensation and making it as hassle-free as possible for travelers around the world.

Underwritten by Allianz Travel Insurance

The Allianz Travel Insurance company has built its reputation on partnering with agents all around the world to provide comprehensive travel insurance for their clients. Contact Allianz Travel Insurance for a comprehensive list of coverage.

Underwritten by Chubb

Chubb is the world’s largest publicly traded property and casualty insurance company, and recognized as the premier provider of insurance for successful individuals and families in the U.S. and selected international markets, offering coverage for high-value automobile, homeowners, recreational marine/aviation, valuables and umbrella liability coverage. As an underwriting company, Chubb assesses, assumes and manages risk with insight and discipline, and combines the precision of craftsmanship with decades of experience to conceive, craft and deliver the best insurance coverage and services to individuals, families and business of all size.

Underwritten by Enterprise

A family-owned, world-class portfolio of brands. A global network that spans across more than 85 countries. Some 97,000 dedicated team members sharing common values. And more than 1.9 million vehicles taking our customers wherever they need to go.

Underwritten by Fareportal

Fareportal’s portfolio of brands, which include  CheapOair and  OneTravel, are dedicated to helping customers enjoy their trip. Whether you want to call, click, or use one of our travel apps, one thing is clear: We make it easy to take it easy.

Underwritten by Insuremyrentalcar.com

An independent provider of low cost CDW/LDW insurance for use with rental cars. Up to $100,000 cover with no deductible. Policies available on a per day, per trip or per year basis. Also works with overseas rentals. Try  Insuremyrentalcar.comnow.

Underwritten by InsureMyTrip

It’s simple. InsureMyTrip finds you the right travel insurance plan, every time. InsureMyTrip is the authority on travel insurance. Rated A+ for travel insurance by the Better Business Bureau. All travelers that purchase a policy through  InsureMyTrip have access to Anytime Advocates® for claims assistance.

Underwritten by Mediacom Communications

The nation’s fifth-largest cable operator, serving the smaller cities and towns in the Midwest and Southern regions of the United States. We are a high-performance broadband, entertainment, and communications company that brings the power of modern technology and quality customer experience to life inside the connected home by combining ultra-fast gigabit speeds with personalized local and over-the-top entertainment choices that fit your lifestyle. Details at  Mediacomcable.com.

Underwritten by SCOTTeVEST

An innovative apparel brand for people who want easy access to everything they need. For those who live for every second, SCOTTeVEST lets you maximize your life. Ditch the carry-on bag and pick up a  SCOTTeVEST.

Underwritten by Virtuoso

The leading global network for luxury and experiential travel. This invitation-only organization comprises over 1,000 travel agency locations with 17,500 advisors in over 45 countries, and holds preferred relationships with 1,700 of the world’s finest travel companies. Virtuoso advisors collaborate with their clients to create personalized itineraries featuring exclusive perks, while also providing advice, access, advocacy, and accountability. For more information, visit  Virtuoso.com.

Underwritten by VisitorsCoverage

As a company that is constantly striving to simplify travel insurance, VisitorsCoverage, is on a mission to help travelers make the better decisions about purchasing travel insurance, quickly. VisitorsCoverage has helped millions of travelers globally to buy the suitable travel insurance and explore the world with confidence. Get insurance for your next trip at  VisitorsCoverage. Lowest Price Guaranteed.

Underwritten by MedjetAssist

Medjet is the premier global air-medical transport, travel security and crisis response membership program for travelers. With a MedjetAssist membership, if you become hospitalized more than 150 miles from home, we will get you from that unfamiliar hospital all the way home to the hospital you trust. All you ever pay is your membership fee. MedjetHorizon members add 24/7 personal security and crisis response benefits. Elliott.org readers enjoy discounted rates. Travel safer with  MedjetAssist.

Underwritten by Southwest Airlines

The mission of Southwest Airlines is dedication to the highest quality of Customer Service delivered with a sense of warmth, friendliness, individual pride, and Company Spirit. We are committed to provide our Employees a stable work environment with equal opportunity for learning and personal growth.

Underwritten by Sungard Availability Services

Leveraging more than 35 years of experience, Sungard AS designs, builds and runs critical IT services that help businesses manage complex IT, adapt quickly and build resiliency and availability. A leading provider of critical production and recovery services, Sungard AS partners with customers across the globe, delivering resilient IT systems, infrastructure and recovery services tailored to achieving desired business outcomes.

Underwritten by TravelInsurance.com

TravelInsurance.com makes it fast and easy to compare and buy travel insurance online from top rated providers. Our unbiased comparison engine allows travelers to read reviews, compare pricing and benefits and buy the right policy with a price guarantee, every time. Compare and buy travel insurance now at  TravelInsurance.com.

Underwritten by Squaremouth

Squaremouth helps travelers easily and instantly compare travel insurance policies from all major providers. Only companies that meet the strict requirements of Squaremouth’s Zero Complaint Guarantee are available on the website. Compare policies on  Squaremouth.com to save over 70 percent on your next purchase.

Underwritten by Travel Leaders Group

Travel Leaders Group is transforming travel through its progressive approach toward each unique travel experience. Travel Leaders Group assists millions of travelers through its leisure, business and network travel operations under a variety of diversified divisions and brands including All Aboard Travel, Andrew Harper Travel, Colletts Travel, Corporate Travel Services, CruCon Cruise Outlet, Cruise Specialists, Nexion, Protravel International, SinglesCruise.com, Travel Leaders Corporate, Travel Leaders Network and Tzell Travel Group, and its merger with ALTOUR. With more than 7,000 agency locations and 52,000 travel advisors, Travel Leaders Group ranks as one of the industry’s largest retail travel agency companies.

Underwritten by Travelers United

If you’ve been mistreated by the airlines, Travelers United is your voice in Washington. Join the #1 travel advocacy organization working with Congress to improve and protect travelers. Plus, get $400 of annual benefits you can use for travel for only $29/year. Add your voice to ours. Make travel better.  Join today.