How to protect yourself against sophisticated spoofing and phishing scams (and other cyberthreats)

Cyberattacks and threats are on this rise, creating havoc across all industries, on a global scale.

One such example of relevance to members is a highly effective phishing scam targeting Real Estate professionals in the U.S.

Applying the techniques and approach that would-be attackers are commonly and currently using in many and various phishing campaigns, here’s what it may look like:

  • Real Estate professional receives an email that spoofs an organization with whom they have an existing relationship, commonly working together. In this specific on ongoing case, it is American FinancialCorp and United Wholesale Mortgage
  • The sender directs the recipient to access a set of “secure documents” which require their review
  • The Real Estate professional unknowingly follows the link to a fake login site to sign into Microsoft 365.

It is at this point that the attacker collects the Real Estate professional’s Microsoft 365 login credentials. Built to default to a failed login attempt, victims commonly re-attempt the same password, as well as a full range of possible passwords. Credentials are mined and sold, resulting in unauthorized access to user accounts, including financial institutions and social media accounts.

October is Cyber Security Awareness Month

On October 1, Communications Security Establishment Canada launched Cyber Security Awareness Month 2022 (Cyber Month) with the theme, “Fight phishing: Ruin a cyber criminal’s day!”    

Members are urged to educate and protect themselves against cyberthreats. Cyber Security Essentials for Today’s Real Estate Professional is an instructor-led webinar currently being offered at no charge for a limited time.

This training will equip members with valuable knowledge of today’s most common cyberthreats and risks, both personally and professionally.

Session dates:

October 12

October 17

Session times:

9:00 am–10:30 am, 11:00 am–12:30 pm, 1:00 pm–2:30 pm, or 3:00 pm–4:30 pm

For more information about this course or to register, visit the TLC Calendar, phone: 604-930-7644 or email: