Quote That Meets Our Requirements Email Scam

A phishing email campaign, commonly referred to as the "Quote That Meets Our Requirements" scam, has been making the rounds. This deceptive email attempts to lure recipients into providing their email login credentials under the pretense of requesting a quotation for a supposed business deal.

At first glance, the email appears professional. It is often written in both English and French and claims to require human verification to avoid being marked as spam. It directs recipients to access a shared file via a well-known file transfer service like WeTransfer. However, this is nothing more than a cleverly disguised phishing attack.

How the Scam Operates

The scam email instructs users to download a document containing specific requirements for the requested quote. To access this file, the recipient is directed to a fake website that masquerades as WeTransfer or other legitimate file-sharing platforms.

Once on this deceptive site, users are prompted to enter their email login credentials. Scammers capture any information provided on this fake login page and then gain unauthorized access to the victim's email account.

Here's what the fraudulent message says:

Subject: CONTACT

Hello, (sir/madam)

We kindly ask you to provide us with a quote that meets our
requirements.

Please note that the message we have sent you requires your verification
as a living human being and not as spam.

So please use the following URL to view the full requirements of our
order: hxxps://www.avolar.info/we/WeTransfer/WeTransfer/WeTransfer/

We look forward to starting working with you or your company in the near
future

If you have any questions or need clarification, please do not hesitate
to contact us.

SIRET: 53154999600019

VAT: FR70531549996

Tel: +33 6 44 68 97 91

CHARLES WASHINGTON

Bonjour, (monsieur/madame)

Nous vous prions de bien vouloir nous fournir un devis conforme à nos
exigences.

Veuillez prendre note que le message que nous vous avons envoyé
nécessite votre vérification en tant qu'être humain vivant et non en
tant que spam.

Veuillez donc utiliser l'URL suivante pour afficher les exigences
complètes de notre commande : hxxps://www.avolar.info/we/WeTransfer/WeTransfer/WeTransfer/

Nous sommes impatients de commencer à travailler avec vous ou votre
entreprise dans un avenir proche

Si vous avez des interrogations ou si vous avez besoin de
clarifications, n'hésitez pas à nous contacter.

SIRET : 53154999600019

TVA : FR70531549996

Tél : +33 6 44 68 97 91

CHARLES WASHINGTON

The Risks of Falling for the Scam

Email accounts contain lots of personal and professional information, making them valuable targets for cybercriminals. Once scammers access an email account, they can use it for a variety of malicious activities.

Stolen credentials can be exploited to send further phishing emails, spread malware, and even gain access to other accounts related to the compromised email. Business email accounts are particularly at risk, as cybercriminals can use them to infiltrate corporate networks and deploy ransomware or other harmful software.

Potential Consequences for Victims

Beyond email access, cybercriminals can engage in identity theft by using compromised accounts to impersonate the victim. This can lead to fraud, financial theft, and damage to personal and professional reputations.

Financial-related accounts, such as online banking, e-commerce platforms, and digital wallets, can be especially vulnerable. Scammers may attempt unauthorized transactions, make fraudulent purchases, or even request money from the victim's contacts, all under the guise of a legitimate request.

Recognizing and Avoiding Phishing Emails

Phishing scams like the "Quote That Meets Our Requirements" email often have telltale signs that can help users identify them before any damage is done. Here are some red flags to watch for:

• Generic Greetings: Emails that lack personalization or use vague greetings like "Dear Customer" can be a warning sign.
• Suspicious Links: Hovering over a hyperlink without clicking on it can reveal the true destination URL. If the link does not match the official website, it is likely a scam.
• Urgency and Pressure: Scammers tend to create a sense of urgency, claiming that immediate action is required to prevent loss or negative consequences.
• Poor Grammar and Formatting: Many scam emails contain grammatical errors, awkward phrasing, and inconsistent formatting.
• Requests for Personal Information: Legitimate companies will not ask for sensitive credentials via email.

Steps to Take if You’ve Been Targeted

If you have received the "Quote That Meets Our Requirements" email, do not engage with it. Delete the email at once and report it as phishing to your email provider.

For those who may have unknowingly entered their credentials on a phishing site, it is crucial to take immediate action:

• Change Your Passwords: Update passwords for your email and any other accounts linked to it.
• Enable Two-Factor Authentication (2FA): Adding additional layer of security can help deter unauthorized access, even if your credentials have been compromised.
• Monitor Account Activity: Monitor your email account for suspicious activity, such as unfamiliar login attempts or messages you did not authorize.
• Alert Relevant Support Teams: If your work or financial accounts were exposed, contact their respective support teams to secure your account.

The Broader Landscape of Phishing Scams

Phishing emails come in many forms, often mimicking well-known companies, government agencies, or trusted service providers. Some recent phishing scams include:

• "Avoid Getting Locked Out"
• "Capital One - Unrecognized Purchase"
• "New Webmail 2.0"
• "Trust Wallet Sign-In Attempt"

These scams often attempt to harvest login credentials, financial information, or other sensitive personal data.

How to Strengthen Your Online Security

The best defense against phishing and other online scams is vigilance. Consider implementing the following security practices:

• Verify the Sender: If an email says it's from a reputable company, visit their official website directly instead of clicking on links in the email.
• Employ Security Software: Keep antivirus and anti-malware software updated to detect and block phishing attempts.
• Educate Yourself and Others: Awareness is key. Regularly update yourself on the latest scams and educate friends, family, and colleagues on how to recognize and report phishing attempts.
• Backup Important Data: Regularly back up important files to an external drive or cloud service to stop data loss in case of malware infection.

Final Thoughts

The "Quote That Meets Our Requirements" email scam is just one of many phishing campaigns designed to steal sensitive information. By staying cautious and recognizing warning signs, users can avoid falling victim to these schemes. Protecting personal and professional data requires a proactive approach—staying informed, verifying sources, and practicing good cybersecurity habits can help you avoid digital threats.