Email scams that mimic event invitations from services such as Evite and Paperless Post are now being used to steal personal data, according to recent reports.
The fraudulent messages appear to be legitimate invitations, complete with event details and RSVP links that look familiar to recipients.
When recipients click the link, they are redirected to a phishing site that collects login credentials or other sensitive information, allowing attackers to harvest personal data.
In some cases, the emails are framed as a way to reconnect with old friends or former partners, giving the request a more personal tone that can lower the recipient’s guard.
Email phishing continues to evolve, and security experts advise users to verify the sender’s address and avoid clicking on links in unsolicited invitations.
<small>Source: Wired — read the original story there.</small>
