Curious to see where you went wrong and why?
Here is the solution to our quiz!
Real of Fake? Real.
The email comes from @quickbooks.com, the legitimate email address of the company. They are not trying to get you to click a link and are just supplying information.
Real of Fake? Fake.
They are not greeting you with your first name, they’re being suspicious about who has sent you money. They’re trying to get you to open an .htm file, which is a very unusual attachment to send.
If they need to call the attachment “Secure Mail Attachment”, you can safely assume it probably isn’t as secure as they claim.
Furthermore, the email has a bunch of spelling errors, like the footer: “an address that dose not receive replies”
Real of Fake? Fake.
Dropbox only sends emails from @dropbox.com.
Although some companies prefer contacting them (for logging reasons), they would most likely also give you a link with the advice to change your password. This depends on the company, so it wouldn’t be something where you could fully judge the legitimacy of the email from.
These attackers have since then been caught and Dropbox now owns the domain dropboxteam.com, but will never use it to send emails.
Real of Fake? Real.
The email comes from a legitimate email address at Google, uses a lot of personalization in the email and uses the correct Google layout.
No spelling mistakes whatsoever in this email.
Real of Fake? Real.
The email comes from a legitimate Apple email address, they use your name and no spelling mistakes are found whatsoever. They’re also not trying to create urgency to click the link.
Real of Fake? Fake.
The email comes from @id.xlogin-apple.com, an email address that is not owned by Apple. They are using a lot of words to create urgency like “unauthorized”, “immediately”, etc.
Real of Fake? Real.
The email comes from a legitimate email address at PayPal and they’re not trying to make you click any links.
Real of Fake? Real.
The email comes from a legitimate email address, is visually pleasing without spelling mistakes. They are using personalization in the email and despite the urgency, they are not telling you to click a specific link. Rather, they just ask you to login (which could be directly from the website as well).
Head over to our Phishing page to see what we can do to help you and others in your organization protect yourselves from these fake emails.