Privacy Ninja



        • Secure your network against various threat points. VA starts at only S$1,000, while VAPT starts at S$4,000. With Price Beat Guarantee!

        • API Penetration Testing
        • Enhance your digital security posture with our approach that identifies and addresses vulnerabilities within your API framework, ensuring robust protection against cyber threats targeting your digital interfaces.

        • On-Prem & Cloud Network Penetration Testing
        • Boost your network’s resilience with our assessment that uncovers security gaps, so you can strengthen your defences against sophisticated cyber threats targeting your network

        • Web Penetration Testing
        • Fortify your web presence with our specialised web app penetration testing service, designed to uncover and address vulnerabilities, ensuring your website stands resilient against online threats

        • Mobile Penetration Testing
        • Strengthen your mobile ecosystem’s resilience with our in-depth penetration testing service. From applications to underlying systems, we meticulously probe for vulnerabilities

        • Cyber Hygiene Training
        • Empower your team with essential cybersecurity knowledge, covering the latest vulnerabilities, best practices, and proactive defence strategies

        • Thick Client Penetration Testing
        • Elevate your application’s security with our thorough thick client penetration testing service. From standalone desktop applications to complex client-server systems, we meticulously probe for vulnerabilities to fortify your software against potential cyber threats.

        • Source Code Review
        • Ensure the integrity and security of your codebase with our comprehensive service, meticulously analysing code quality, identifying vulnerabilities, and optimising performance for various types of applications, scripts, plugins, and more

        • Email Spoofing Prevention
        • Check if your organisation’s email is vulnerable to hackers and put a stop to it. Receive your free test today!

        • Email Phishing Excercise
        • Strengthen your defense against email threats via simulated attacks that test and educate your team on spotting malicious emails, reducing breach risks and boosting security.

        • Cyber Essentials Bundle
        • Equip your organisation with essential cyber protection through our packages, featuring quarterly breached accounts monitoring, email phishing campaigns, cyber hygiene training, and more. LAUNCHING SOON.

Beware: AOL Phishing Email States Your Account Will Be Closed

Beware: AOL Phishing Email States Your Account Will Be Closed

Source: Jeran Renz

An AOL mail phishing campaign is underway to steal users’ login name and password by warning recipients that their account is about to be closed.

While most people are using Gmail, Outlook, or other modern free mail services, many older people continue to use AOL simply because they are used to the service and find it too complicated to switch to a new email service.

Unfortunately, this also makes them prime targets for phishing scams that, in my experience, tend to slip through AOL’s email filters more easily than other service’s filters, such as Gmail.

This week I was contacted by two older family members who received an email with a scary email subject stating that their “Mail Box will close in 3 days log in to re-activate.”

Scared that the email accounts they used for close to 25 years would be closed, they forwarded me the email and asked for advice.

The email stated that they need to login and verify their account within 72 hours, or AOL will deactivate their account.

“We don’t want to say goodbye!”
“We noticed you haven’t updated your account information recently, and since your security is our top priority, we plan to close this account as soon as possible. It’s going to take 3 days unless you act soon. Unless you verify this account, it will be closed in 72 hrs,” warns the AOL phishing email.

Enclosed in the email was a link to a poorly constructed AOL phishing landing page that asked visitors to log in to AOL.

Also Read: What Do 4 Messaging Apps Get From You? Read The iOS Privacy App Labels

PayPal phishing page

Once AOL credentials are submitted on the form, the stolen credentials are sent to the attackers, and the user is redirected to the standard AOL login page.

As I have made a point of teaching family members about phishing scams and what to look out for, my family members did not fall for the scam.

Unfortunately, many people may not have received the same education and will likely enter their AOL login information.

What should you do if you entered your info?

If you received this phishing scam and mistakenly entered your login information, you should immediately log in to AOL and change your password.

If the site doesn’t accept your password, it’s possible the attackers already gained control over your account. In that situation, you should contact AOL support.

If you use your AOL password at other sites, you should change them there as well.

When changing your passwords, be sure to use a different password at every site. By doing this, if one site suffers a data breach, it won’t affect your credentials at the other site.

Also Read: Key PDPA Amendments 2019/2020 You Should Know

To help you keep track of all of your unique passwords, BleepingComputer suggests using a password manager.



Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!

Personal Data Protection


We have assisted numerous companies to prepare proper and accurate reports to PDPC to minimise financial penalties.


Click one of our contacts below to chat on WhatsApp

× Chat with us