SCAM ALERT: Trade Association Email Phishing Scam

Yesterday, a trade association client of Hilltop Consultants encountered a new variation of a previously reported email scam. While many organizations have seen an increase in fraudulent requests for wire transfers, what they have not seen are requests for their membership lists. The text below was received by several employees of our national trade association client. The names of the recipient and trade association have been replaced to protect their identify. The sender of the email appeared to be the president of the trade association:

Hi Employee,

I need our Trade Association Membership list, just name and email contact, please compile ALL membership type in microsoft-word or excel, attach and send to me as you reply

Kindly, send to the 2 email addresses below:
This email address is being protected from spambots. You need JavaScript enabled to view it. (senders email address was spoofed)
This email address is being protected from spambots. You need JavaScript enabled to view it.

The scammer most likely intended to use this membership list for further illicit activities. They will likely send the message from the same spoofed sender address as the initial request for the membership list.

Please advise your staff that your trade association membership list is as valuable as gold in the hands of spammers and internet scammers. Don’t send it to ANYONE without verbally verifying the authenticity of the email request.

If you have received any trade association phishing emails, or if you want to take precautions on how to avoid being the victim of similar email phishing scams, please contact a Hilltop Network & Cyber Security Consultant today.