Email is one of our top productivity tools—and cybercriminals know it. According to a joint alert from the National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA), a new and highly profitable phishing campaign is making the rounds.
Both agencies are urging the public to understand how this scam works, because awareness is the first line of defense against losing money—or opening the door to even bigger cyberattacks.
The “Fear Factor” Tactic
This phishing campaign preys on fear and urgency. Targets receive an email claiming a subscription is about to expire and will auto-renew for hundreds of dollars—often for antivirus software.
Cybercriminals rely on three things:
- Fear of unexpected charges
- Financial pressure
- Urgency to act fast
- Once recipients take the bait, they’re directed to call a fake “help desk,” which is actually controlled by the hackers.
The RMM Software Trap
Victims are then instructed to download Remote Monitoring and Management (RMM) software, which hackers use to:
- Access the victim’s bank account remotely
- Bypass antivirus software and system protections
- Potentially launch ransomware attacks or identity theft
While RMMs are legitimate IT tools often used by businesses, hackers exploit them to gain unfettered access to victims’ devices and financial accounts.
How to Stay Safe
Follow these cybersecurity best practices to avoid falling victim:
- Be skeptical of emails about unexpected subscription renewals or fees.
- Do not download software from an email or unknown caller without verification.
- Verify with IT support before taking action—especially if you’re part of an organization using RMM tools.
- Spread awareness to friends, family, and coworkers—sharing knowledge is one of the best defenses against phishing.
Bottom Line
Cybercriminals thrive on fear and urgency. If an email pressures you to act fast or download software, pause and verify before taking any action. Awareness can save your money, your data, and your peace of mind.
