When you think about the constantly evolving nature of cyber attacks, you may think about threat actors using AI to find and exploit new vulnerabilities in software and networks. Yet one recent cyber threat takes advantage of people’s trust in the post office.

Hackers are using snail mail to spread malware.

This strategy is especially devious because it targets victims at their physical mailbox—one of the last places they’re expecting to encounter cyber threats.

Keep reading for details about this potential danger. You’ll also get practical steps you and your clients can take to stay safe from cyber attacks when each day’s mail arrives.

Common Kinds of Cyber Attacks via Snail Mail

Snail mail cyber attacks involve sending physical letters, postcards, or packages with malicious intentions.

Examples include:

• QR Code Cyber Attacks
  Hackers send letters containing QR codes. When scanned, these codes link victims to malicious websites or force malware to download onto their devices.
  

• Malicious USB Drives
  Some attackers send USB drives through the mail. Once plugged into a computer, these drives install harmful software without the user’s knowledge.
  

• Fake Banking Letters
  Letters falsely claiming to be from banks request personal information such as Social Security numbers. If recipients give up the information, their accounts could suffer unauthorized access.
  

While cyber attacks through the post office take various forms, the motivation is always financial gain.

Once malicious code is on a device, it can provide hackers with unauthorized access to banking apps. Users could face unauthorized transactions or even lose control over their accounts. With sophisticated banking malware, the threat actors can drain funds before the user realizes anything is wrong.

Hackers can also steal personal information: Social Security numbers, contact details, and more. They could use this data themselves in further cyber attacks, including identity theft and phishing campaigns. Or they could sell it to other hackers on illegal markets.

Why Snail Mail Hackers Can Be Successful

In our high-speed digital world, it’s easy to overlook traditional means of communication. This complacency can come at a cost.

Many people perceive physical mail as more trustworthy than cyber mail. Indeed, in recent years, the U.S. Postal Service has ranked as one of the country’s most trusted brands.

But this baked-in trust factor makes physical letters an effective tool for spreading malware, as does the fact that mail delivered by hand can easily bypass electronic security measures.

Traditional mail also carries an element of surprise cyber attackers use to their advantage. Unlike emails or text messages, physical mail isn’t expected to carry cyber threats.

When a letter arrives with a directive to scan a QR code or download from a given URL, it can catch people off guard, increasing the chances they will interact with malicious software.

How To Guard Against Snail Mail Cyber Attacks

Law enforcement agencies and security organizations are working to raise awareness of cyber attacks conducted through postal mail.

For example, in Switzerland, the National Cyber Security Centre sounded the alarm about cyber criminals sending counterfeit letters that urged recipients to download a “Severe Weather Warning App.” The “app” was actually a cell phone cyber attack targeting mobile devices running on the Android operating system.

Authorities hope to diminish these attacks’ success rate. But as with other cyber threats, individuals and organizations must take proactive steps to protect themselves against malicious behavior.

“[U]nlike on the web where you can use automated solutions to catch out phishing attempts,” Mike Britton of Abnormal Security told Forbes, “these attacks will be solely down to the individual to catch out.”

Here are some best practices to follow:

• Stay Vigilant and Skeptical
  If your mail brings a letter that seems suspicious, contact the sender through established, official channels before taking action based on it. Be wary of mail that comes from unfamiliar senders, that uses poor grammar and spelling, or that uses urgent, overly generic, or threatening language.
  
• Scan a QR Code With Security Software First
  Before scanning a QR code to connect to a website, scan it with a reputable security app.
  
• Avoid Direct Scans Whenever Possible
  Instead of scanning QR codes, type URLs into a browser when you can, and only do so if you know and trust the source.
  
• Update Your Devices
  Keep your security software on all your devices up to date.
  
• Monitor Your Accounts
  Check your accounts on a regular basis for suspicious activity, and immediately report any such activity you notice.

Snail Mail Attacks—Another Reason To Carry Cyber Insurance

Hackers targeting mailboxes with malicious codes in letters is an emerging threat. Yet it only underscores the ongoing need for your business clients to carry Cyber Liability Insurance.

Cyber Insurance alone can’t stop snail mail cyber attacks. But it can significantly enhance your clients’ overall security posture. It provides vital assistance in recovery efforts after a cyber incident, as well as critical protection against financial losses.

Registered ProWriters brokers can use our Digital IQ Comparative Rate Platform to research robust Cyber Insurance policies at competitive rates from the industry’s top carriers. In a matter of minutes, it returns multiple options ready for side-by-side comparison.

Helping your clients secure the levels of Cyber Insurance they need has never been faster or easier. Register as a ProWriters broker to get started.