A seemingly legitimate email from an alleged but fake DIHK or IHK address arrives in your inbox, requesting data updates. It uses a forged DIHK/IHK logo, sounds urgent, and warns of negative consequences for non-compliance. Here is an example of such a phishing email designed to encourage data sharing.

© DIHK

Sender addresses can vary. The domains are, for instance, firmenaktualisieren.net, datenaktualisieren.com, firmenaktualisieren.org or informations-aktualisierung.com.

However, there are countless versions. Once a domain is identified as a phishing domain, we report it to the respective registrar. The registrar blocks the domain to prevent further damage. But the perpetrators immediately register new domains, which are not only used for new email addresses but also for the phishing website itself.

It is therefore important to pay attention to email texts like the one shown above and to input masks like this:

© DIHK

This always looks the same – and never comes from the DIHK. We do not request your data via such emails. If you are unsure, contact the supposedly requesting entity via an official channel on their website.

Otherwise, the rule is: Please don’t enter your data into such forms, delete those emails, and don’t respond. If you have already entered your data, it is now in the wrong hands.

We are in contact with the authorities, the Federal Office for Information Security (BSI), and CERT-Bund, the Computer Emergency Response Team for federal agencies.

In this article, we keep you updated on the latest phishing scams.