The New Jersey Cybersecurity & Communications Integration Cell (NJCCIC) has received reports of holiday e-card scams targeting New Jersey residents and agencies. Spoofed emails were sent appearing to originate from legitimate organizations and contained the subject line “…has sent you an ecard.” In order to view the e-card, the scam prompts users to click on the link in the body or bottom of the email, copy and paste the link in the address bar of the browser, or visit the website and enter a personal pickup code. Threat actors commonly leverage public interest during the holidays to conduct financial fraud and disseminate malware.
The NJCCIC recommends users educate themselves and others about these types of scams to prevent further victimization. Users who receive unexpected or unsolicited email requests from known senders inviting them to click on a link or open an attachment should always verify the sender via another means of communication before taking any action.