{"id":17033,"date":"2020-07-17T13:02:20","date_gmt":"2020-07-17T09:02:20","guid":{"rendered":"https:\/\/me-en.kaspersky.com\/blog\/kaspersky-ceo-spam\/17033\/"},"modified":"2020-07-17T13:03:55","modified_gmt":"2020-07-17T09:03:55","slug":"kaspersky-ceo-spam","status":"publish","type":"post","link":"https:\/\/me-en.kaspersky.com\/blog\/kaspersky-ceo-spam\/17033\/","title":{"rendered":"What spam does Eugene Kaspersky get?"},"content":{"rendered":"<p>We all get masses of spam in our personal and work inboxes every single day. It ranges from harmless invitations to conferences we\u2019ll never attend and ads for goods and services to not-so-harmless fake messages about winning a lottery or requests for help, usually in the form of a money transfer. Spammers write to everyone: students, housewives, CEOs.<\/p>\n<p>We decided to take a look at what finds its way into the mailbox of the head of Kaspersky, and how the spam in his mail differs from the average. Of course, Eugene himself never sees most of these messages \u2014 they are automatically sent to the trash.<\/p>\n<h2>Some stats<\/h2>\n<p>We divided the spam in Eugene\u2019s mailbox into several categories. The largest category (roughly a third of all messages) was B2B spam. That includes commercial offers from companies, invitations to conferences, and requests for a meeting or phone call.<\/p>\n<div id=\"attachment_36380\" style=\"width: 2010px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/07\/17130228\/kaspersky-ceo-spam-screen-1.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-36380\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/07\/17130228\/kaspersky-ceo-spam-screen-1.png\" alt=\"Types of spam in Eugene Kaspersky's mail\" width=\"2000\" height=\"1793\" class=\"size-full wp-image-17034\"><\/a><p id=\"caption-attachment-36380\" class=\"wp-caption-text\">Types of spam in Eugene Kaspersky\u2019s mail<\/p><\/div>\n<p>In second place were phishing attempts to extract Eugene\u2019s personal information.<\/p>\n<p>In third place were advance-fee scams \u2014 messages claiming to be from the lawyers of alleged relatives and other far-flung benefactors hoping to share millions of dollars with him.<\/p>\n<h2>Common business spam<\/h2>\n<p>Unsolicited advertising for B2B services and events is a fairly harmless form of spam. Many e-mails in this category are genuine commercial offers, invitations to conferences, and the like.<\/p>\n<p>Some of them might even be of interest to Eugene\u2019s colleagues, but he himself usually only attends major industry events. Besides, he couldn\u2019t process so many business proposals even if that was all he ever did with his time. Therefore, such messages end up in the spam folder.<\/p>\n<p>Business spam is often personalized: the authors stress that the offer is unique to the Kaspersky CEO and refer to him by name. But that does not redeem them in the eyes of the spam filter.<\/p>\n<div id=\"attachment_36381\" style=\"width: 1350px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/07\/17130241\/kaspersky-ceo-spam-screen-2.jpg\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-36381\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/07\/17130241\/kaspersky-ceo-spam-screen-2.jpg\" alt=\"Some business spammers address Eugene Kaspersky by name\" width=\"1340\" height=\"420\" class=\"size-full wp-image-17036\"><\/a><p id=\"caption-attachment-36381\" class=\"wp-caption-text\">Some business spammers address Eugene Kaspersky by name<\/p><\/div>\n<p>Among the B2B messages, however, are some that look more like spam proper than misdirected proposals. For example, the authors of the e-mail in the screenshot below warn Eugene that this is his last chance to register for a webinar. They\u2019re obviously hoping to create a sense of urgency.<\/p>\n<div id=\"attachment_36382\" style=\"width: 1350px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/07\/17130248\/kaspersky-ceo-spam-screen-3.jpg\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-36382\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/07\/17130248\/kaspersky-ceo-spam-screen-3.jpg\" alt=\"Pressing Eugene Kaspersky to register for a webinar\" width=\"1340\" height=\"702\" class=\"size-full wp-image-17038\"><\/a><p id=\"caption-attachment-36382\" class=\"wp-caption-text\">Pressing Eugene Kaspersky to register for a webinar<\/p><\/div>\n<h2>Phishing<\/h2>\n<p>The personal data of top-level managers is highly prized, so Eugene gets far more phishing spam than other users. For example, the message below looks like a <a href=\"https:\/\/www.kaspersky.com\/blog\/fake-voicemail-spam\/28727\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">voicemail notification<\/a>. Unsurprisingly, to listen to it, Eugene would have to enter his account credentials.<\/p>\n<div id=\"attachment_36383\" style=\"width: 680px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/07\/17130256\/kaspersky-ceo-spam-screen-4.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-36383\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/07\/17130256\/kaspersky-ceo-spam-screen-4.png\" alt=\"Fake voicemail notification\" width=\"670\" height=\"448\" class=\"size-full wp-image-17040\"><\/a><p id=\"caption-attachment-36383\" class=\"wp-caption-text\">Fake voicemail notification<\/p><\/div>\n<h2>\u201cNigerian\u201d spam<\/h2>\n<p>Eugene also gets more advance-fee scam e-mails than the average user. The offers include not only inheritances, but also, for example, the payment of alleged substantial debts owed to his company. Most likely, the fraudsters hope that the CEO of a global company will think nothing of paying a small amount up front to engage an intermediary, which is what such messages usually boil down to.<\/p>\n<div id=\"attachment_36384\" style=\"width: 680px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/07\/17130306\/kaspersky-ceo-spam-screen-5.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-36384\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/07\/17130306\/kaspersky-ceo-spam-screen-5.png\" alt=\"Scammers promise to pay $15 million owed to Kaspersky (the company)\" width=\"670\" height=\"587\" class=\"size-full wp-image-17042\"><\/a><p id=\"caption-attachment-36384\" class=\"wp-caption-text\">Scammers promise to pay $15 million owed to Kaspersky (the company)<\/p><\/div>\n<h2>Fundraising<\/h2>\n<p>Another type of spam worth mentioning is e-mails about raising money for supposedly sick relatives. Why supposedly? Well, a <a href=\"https:\/\/www.kaspersky.com\/blog\/fake-charity-scam\/28496\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">search for the card number for receiving donations<\/a> revealed that its owner had a dozen sick children and an entire menagerie of ailing animals. As a company that supports <a href=\"https:\/\/csr.kaspersky.com\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">many charity projects<\/a>, we know how to evaluate them.<\/p>\n<h2>Ransomware<\/h2>\n<p>Another thing that winds up in Eugene\u2019s spam is outright blackmail. But whereas the average user is commonly threatened with the <a href=\"https:\/\/www.kaspersky.com\/blog\/extortion-spam\/25070\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">disclosure of personal secrets<\/a>, our CEO is menaced with threats of data leakage. Here\u2019s one such example: \u201cYour computer was infected by my team and we were able to access both it and your data. If you want everything to remain secret, we strongly recommend that you transfer $200 to our bitcoin wallet.\u201d<\/p>\n<p>There was, of course, no infection.<\/p>\n<h2>E-mails from strange people<\/h2>\n<p>A separate category of spam in Eugene\u2019s mailbox is made up of messages that we usually call \u201ce-mails from strange people.\u201d These are messages in which the sender spills their guts, goes overboard with the threats (respond-or-the-puppy-gets-it style), or makes what they clearly think is a great offer.<\/p>\n<p>For example, among other things, we found an e-mail entitled \u201cHomeless people will go to jail instead of you\u201d and offering Eugene, the head of a major international company, a fake passport.<\/p>\n<p>Some tech lover told our CEO that an inventor from Kentucky created something that had even the White House aflutter:<\/p>\n<div id=\"attachment_36386\" style=\"width: 680px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/07\/17130314\/kaspersky-ceo-spam-screen-7.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-36386\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/07\/17130314\/kaspersky-ceo-spam-screen-7.png\" alt=\"News of an invention that alarmed the Trump administration\" width=\"670\" height=\"568\" class=\"size-full wp-image-17044\"><\/a><p id=\"caption-attachment-36386\" class=\"wp-caption-text\">News of an invention that alarmed the Trump administration<\/p><\/div>\n<p>Meanwhile, the author of this next message fears that someone is stealing his data through mobile TV and various radio frequencies, and confuses our head with a competitor.<\/p>\n<div id=\"attachment_36387\" style=\"width: 680px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/07\/17130331\/kaspersky-ceo-spam-screen-8.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-36387\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/07\/17130331\/kaspersky-ceo-spam-screen-8.png\" alt=\"Eugene Kaspersky is asked for help in his capacity as CEO of Malwarebytes\" width=\"670\" height=\"443\" class=\"size-full wp-image-17046\"><\/a><p id=\"caption-attachment-36387\" class=\"wp-caption-text\">Eugene Kaspersky is asked for help in his capacity as CEO of Malwarebytes<\/p><\/div>\n<p>The imagination of some supplicants is enviable, but that does not save their carefully crafted compositions from the jaws of the spam folder.<\/p>\n<h2>Coronavirus spam<\/h2>\n<p>Like any popular topic, the coronavirus pandemic was and is a spam magnet. In Eugene\u2019s spam folder, we found ads for masks, personal ventilators, virus-related online seminars and conferences, and much more.<\/p>\n<div id=\"attachment_36388\" style=\"width: 680px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/07\/17130339\/kaspersky-ceo-spam-screen-9.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-36388\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/07\/17130339\/kaspersky-ceo-spam-screen-9.png\" alt=\"Mask ad in Eugene Kaspersky's mailbox\" width=\"670\" height=\"697\" class=\"size-full wp-image-17048\"><\/a><p id=\"caption-attachment-36388\" class=\"wp-caption-text\">Mask ad in Eugene Kaspersky\u2019s mailbox<\/p><\/div>\n<p>We found e-mails about the pandemic in all major spam categories, be it B2B, advance-fee scam, messages from Chinese factories, or any other garbage. Analysis of all recent unsolicited e-mails reveals that more than half are associated with coronavirus.<\/p>\n<div id=\"attachment_36389\" style=\"width: 2010px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/07\/17130346\/kaspersky-ceo-spam-screen-10.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-36389\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/07\/17130346\/kaspersky-ceo-spam-screen-10.png\" alt=\"More than half of all spam in Eugene's mail exploits the COVID-19 topic\" width=\"2000\" height=\"1793\" class=\"size-full wp-image-17050\"><\/a><p id=\"caption-attachment-36389\" class=\"wp-caption-text\">More than half of all spam in Eugene\u2019s mail exploits the COVID-19 topic<\/p><\/div>\n<h2>Barking up the wrong tree<\/h2>\n<p>A rummage through our CEO\u2019s trash folder turns up seminars for accountants, promises of easy money, and ads from stores trying to attract customers. Such messages are sent to everyone and his dog, so it\u2019s not surprising that Eugene receives them too.<\/p>\n<p>Eugene gets even more spam than most people do, however, for several reasons. For one thing, the CEO\u2019s business e-mail address is easy to find, and those who use it include people who genuinely want to reach out to the company but don\u2019t know who the proper contact person is.<\/p>\n<p>And for another, there seems to be a certain thrill in attacking someone whose very name is synonymous with fighting cybercrime. What\u2019s more, if an attack on the guy at the top were to succeed, the profits would be phenomenal. At least that seems to be the thought that motivates scammers and spammers to keep clicking the send button.<\/p>\n<input type=\"hidden\" class=\"category_for_banner\" value=\"ksc-trial-generic\">\n","protected":false},"excerpt":{"rendered":"<p>We examined the contents of Kaspersky&#8217;s CEO&#8217;s spam folder to find out what spammers and phishers think might entice him.<\/p>\n","protected":false},"author":2610,"featured_media":17052,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1486],"tags":[1172,2231,1815,80,76,695,240],"class_list":{"0":"post-17033","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-threats","8":"tag-advertising","9":"tag-coronavirus","10":"tag-e-mail","11":"tag-fraud","12":"tag-phishing","13":"tag-scam","14":"tag-spam"},"hreflang":[{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/kaspersky-ceo-spam\/17033\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/kaspersky-ceo-spam\/21570\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/kaspersky-ceo-spam\/22830\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/kaspersky-ceo-spam\/21022\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/kaspersky-ceo-spam\/19719\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/kaspersky-ceo-spam\/23506\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/kaspersky-ceo-spam\/22345\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/kaspersky-ceo-spam\/28746\/"},{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/kaspersky-ceo-spam\/8606\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/kaspersky-ceo-spam\/36379\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/kaspersky-ceo-spam\/15306\/"},{"hreflang":"pl","url":"https:\/\/plblog.kaspersky.com\/kaspersky-ceo-spam\/13693\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/kaspersky-ceo-spam\/24740\/"},{"hreflang":"ja","url":"https:\/\/blog.kaspersky.co.jp\/kaspersky-ceo-spam\/28853\/"},{"hreflang":"nl","url":"https:\/\/www.kaspersky.nl\/blog\/kaspersky-ceo-spam\/25693\/"},{"hreflang":"ru-kz","url":"https:\/\/blog.kaspersky.kz\/kaspersky-ceo-spam\/22600\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/kaspersky-ceo-spam\/27854\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/kaspersky-ceo-spam\/27690\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/me-en.kaspersky.com\/blog\/tag\/spam\/","name":"spam"},"_links":{"self":[{"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/17033","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/users\/2610"}],"replies":[{"embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/comments?post=17033"}],"version-history":[{"count":9,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/17033\/revisions"}],"predecessor-version":[{"id":17051,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/17033\/revisions\/17051"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/media\/17052"}],"wp:attachment":[{"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/media?parent=17033"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/categories?post=17033"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/tags?post=17033"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}