Senders and Subject Lines

Sender Email Addresses

  • info[@]academypsy[.]it
  • info[@]buchenwald[.]de

Subject Lines

  • Immediate Attention Needed: Campaign Suspension (Case #339098-49973)
  • Immediate Attention Needed: Campaign Suspension (Case #48384-49973)
  • ref: #9484788-478847 Account Suspended
  • Suspension of Your Email Campaign (Case #57845768-48947322)
  • Urgent: Suspension of Your Email Campaign (Case #57845768-48947322)

Original Phishing Message Example

Where did the link lead?

Tips for Detection

  • Notice the false sense of urgency in the email. Many phishing emails threaten account suspension or similar.
  • The emails are coming from suspicious domains. Legitimate emails from Emma will likely come from an @myemma[.]com domain.
  • Always hover over links in emails. The link in this email does not go to myemma[.]com but instead goes to a fake phishing site, myemma-updates[.]com, which is designed to look very similar to the real login page. Before entering credentials on websites, double check the URL in your browser to make sure it is a known website.

Text of Original Phishing Message

Hello Client,

I trust this note finds you in good health! We’re here to assist you in restarting your email campaign and make sure your account is up-to-date.

To keep enjoying our services and to efficiently engage with your subscribers, we kindly ask you to update your account details.

Here’s what you need to do:

  1. Login: Click the provided link to log into your account.
  2. Update Information: Head over to the ‘Account Settings’ area to check and modify your information.
  3. Validate Changes: After updating the required details, please validate and save these changes.

Update your account

Once your account is refreshed, you’ll be ready to launch your email campaigns without any downtime.

Thank you for taking this quick action. We’re eager to see your email campaigns up and running again soon!

Warm wishes,

Emma Team