Euan Mitchell, musician, author and editor extraordinaire reports on a fairly sophisticated phishing scam:
Today I got a personalised email that claimed to be from Hachette Book Group wanting to know if I was currently working on another book. It mentioned the titles of some of my books as well as OverDog Press, so it wasn't a bulk email. Then I checked whether the alleged sender Gabrielle Gambrell is actually a legit employee of Hachette Book Group. She is.
However, I was still suspicious because the email address had an extra 'h' in the company's usual email domain name. So I Googled the email address and the word "scam" and Google AI confirmed it IS a scam. I don't want you or any of your authors caught out by this, so I've copied below what Google AI replied to my enquiry.
The email address gabrielle.gambrell@hhbgusa.com is a scam.
This is a classic phishing and typosquatting attempt designed to impersonate Gabrielle Gambrell, who is the legitimate Chief Communications Officer at Hachette Book Group (HBG). [1]
Here is why you should not interact with this email:
Fake Domain: The legitimate, official domain used by Hachette Book Group for all employee communications is
@hbgusa.com. The scam email uses@hhbgusa.com(with an extra "h"), which is a malicious domain registered by scammers to trick you. [1, 2]Impersonation Tactic: Scammers frequently spoof the names of real executives and editors at major publishing houses. Their goal is usually to bait writers into fake publishing contracts, request "advance fees" for editing or marketing, or steal sensitive personal and financial data. [1]
According to the official Hachette Book Group Fraud Alert page, legitimate employees will never email you from alternative domains or solicit payments to publish a manuscript. Block the sender immediately and do not reply or click any links. [1, 2]
So beware of unsolicited emails, even ones that appear legitimate or plausible. If only the scammers used their obvious creative talents for good rather than evil…
