Cybercriminals start this attack by sending you a phishing email with an HTML file attached. The email looks like it’s from Ring, and it instructs you to open the file to update your Ring membership. If you click this file, you’ll be redirected to a malicious website that spoofs Ring’s login page. This website prompts you to enter sensitive information, such as your credit card number and social security number. If you enter your information, you’ll be redirected to Ring’s legitimate website, making the email look more real.

Follow the tips below to stay safe from similar scams:

• Never click a link or download an attachment in an email that you aren’t expecting.
• If you receive an email claiming that you need to make changes in your account, always log in to the organization’s website directly.
• Remember that this type of attack isn’t exclusive to Ring. Cybercriminals could use this technique to impersonate any type of service.