While email scams are getting more sophisticated, they’re still usually low-level traps where you either quickly engage or you don’t. More worrying is that state-sponsored actors have found more devious ways to lure targeted individuals into clicking a compromised link, according to the cybersecurity researchers at Proofpoint.
It’s a slow-burn attack. First, victims will find themselves CC’d into an email between several familiar-sounding individuals. A couple of days will pass, and then one of the other fake accounts will email the whole group back, again copying in the intended victim (i.e. you).
