Spear phishing is an increasing security problem for small businesses. Spear phishing is an attempt by email to steal login credentials. Typically, the nefarious actor sends an email with a legitimate logo indicating that an account is “on hold” or “requires action.” Clicking on the logo typically prompts a request for credentials which is set up to steal information. The scam is often targeted to small businesses with a client base.
Employers should train employees on email security and encourage system users to be cautious of unsolicited email requests.