Phishing attack using Leroy Merlin
These types of attacks can vary depending on the strategy they use. They usually use some kind of bait to lure the victim into falling. For example, a supposed prize, a discount to buy a product, a package that they are going to send you and you have not received… They can adapt it depending on the company they are supplanting.
In this case it is a phishing attack that uses the name of Leroy Merlin to make believe that we are receiving an email from this company. This is a supposed offer that you can get. The message, written entirely in Spanish, tries to make the victim believe that they have been selected to enter a free loyalty program and receive a supposed prize.
Something that stands out is that the message is actually a image. That is, all the text is part of a photograph that in turn redirects to a URL when we click. They indicate that the number of prizes is limited and that we quickly click on “Confirm” so that they can send it. Logically, we are facing a manual Phishing attack, since it includes the following:
- haste: asks us to do something as soon as possible
- use a bait: in this case a supposed gift
- Impersonates a well-known brand: in this case Leroy Merlin
But just by taking a look at this mail we can quickly realize that it is a threat. It is true that they supplant the Leroy Merlin logo to give the appearance of being official and it can mislead, but after analyzing that e-mail we clearly see that it is false.
How to spot a fake email
The first thing you have to do is see the address of that e-mail that you have received There you can clearly see that it is a Phishing attack that is supplanting Leroy Merlin. It is a very rare address, with a domain that has nothing to do with this company, so it is clearly a scam.
You can also watch the message content. Sometimes they make spelling mistakes or put words that don’t make much sense. In this case we can see small clues, such as the use of exclamation marks only at the end of the sentence or word. In addition, we see some punctuation error that, on paper, a serious company would not make.
But what is most striking about the content of the message is that in reality no text. That is, everything we see is an image. They have hidden the message inside a photograph in order to get past email security filters. If the victim clicks on that image, she will automatically end up at a fake address.
In short, if you receive an email supposedly from Leroy Merlin, be careful. It is not a prize, but it is a scam. The best thing is that you remove it automatically and never open any link that comes to you. You can always tell if an email is fake.
