A survey company in our region recently reported a highly convincing phishing attempt that serves as a good reminder for all of us to remain vigilant.

The scam began with what appeared to be a legitimate inquiry from a prospective client requesting a meeting with their architect to discuss a future project. The emails were professional, responsive, and included a polished signature line and profile photo. A meeting was scheduled, and shortly before the start time, the recipient received an “urgent” message claiming the architect was already waiting in the meeting.

What appeared to be a Zoom link was then provided—but it was actually a zipped file.

Fortunately, the recipient did not open the attachment and instead suggested a phone call or an alternative meeting platform. The sender immediately became persistent, pressing for screenshots and additional information, revealing that their true objective was likely to get the file opened.

Cybersecurity experts report that scams like this are becoming increasingly common. Rather than relying on obvious spam messages, attackers are posing as potential clients, architects, contractors, and developers to build trust before attempting to deliver malicious files.

These attacks are often designed to steal passwords, gain access to email accounts, install malware, or potentially deploy ransomware.

A few reminders:

• Never open a ZIP file presented as a Zoom or Teams meeting link.

• Verify unknown clients by phone using publicly listed contact information.

• Use your own meeting platform when possible.

• Be cautious of urgent requests that pressure you to act quickly.

• Report suspicious communications to your IT provider or security team.

If something feels off, trust your instincts. A quick verification call can prevent a costly security incident.