Zoho warns that fake signing emails use look-alike web addresses, like one that swaps an n for an m, to steal data or install harmful software.
A signing request marked "Urgent" can look normal and still be a trap. Zoho, the maker of the e-signature tool Zoho Sign, warns that scammers send links from look-alike addresses such as "sigm.zoho.com" instead of the real "sign.zoho." One letter is different. Many people would miss it.
Signed documents often hold sensitive business details. Zoho says scammers may be after confidential data, or may try to get harmful software onto a device. A rushed click is all it takes. The company says these attacks can cost businesses a lot in data breaches.
The warning is aimed at businesses and employees who sign documents online. Anyone who gets signing requests by email or text should pay attention. Zoho says real signing links always start with "sign.zoho." It also says Zoho Sign never asks anyone to download a file or type in an alphanumeric code (a mix of letters and numbers) to sign. If a message asks for either, treat it as fake.
Zoho also advises downloading its apps only from the official stores, and not sharing personal information unless the sender has turned on an ID check for signers. The alert box above covers what to do if a click already happened.
The post does not say how many people were targeted or whether a specific campaign is underway. The fake address is presented as an example of a common trick, published for Cybersecurity Awareness Month.
Before signing anything online, read the web address letter by letter. A real Zoho Sign link starts with "sign.zoho."
A viral ChatGPT prompt turns what the chatbot remembers about you into a room image. Posting it publicly could give scammers clues to target you.
Read more: Viral ChatGPT room image could hand scammers clues about youA message saying your Amazon account was hacked is often the scam itself. Checking in the Amazon app first can protect your card, gift balance and phone.
Read more: If Amazon says your account was hacked, check before you callThe Attala County Sheriff's Office in Mississippi says scam calls are reaching residents, and a call that sounds official may not be.
Read more: Mississippi sheriff warns residents about scam phone calls
