Important Alert: Phishing Attack Targeting Bar Associations

We want to bring to your attention a phishing attack that has recently impacted several statewide and local bar associations. This scam was first detected a few weeks ago and has intensified this week, affecting multiple state bars. There is a growing concern that associations yet to be targeted might fall victim in the coming days.

If you receive an email purporting to be from San Joaquin County Bar Association with the domain address similar to “member-sjcbar.org”, please disregard it. Do not respond to it. Do not click any links that may come from it.

How the Phishing Attack Works

These phishing emails have been sent to entire bar membership lists, which is a significant departure from the usual targeted emails that typically focus on officers. The fraudulent messages are cleverly disguised as communications from the Executive Director, CEO, or even past or recently elected presidents of the associations.

What to Watch Out For

The phishing email usually asks members to reply, leading to a malicious link embedded in the response. Clicking on this link likely results in malware being installed on the recipient's device, potentially compromising sensitive information.

Stay Vigilant

We urge all members to exercise caution and carefully scrutinize any unexpected emails, especially those asking for a response or containing links. If you receive such an email, please verify its authenticity through other means before engaging with the content.

Protect Your Information

Ensure your antivirus software is up to date and refrain from clicking on links or downloading attachments from unknown sources. Consider reporting any suspicious emails to your IT department. By staying informed and vigilant, we can collectively mitigate the risks posed by these phishing attacks. The safety of our members is our top priority.

Again, if you receive an email purporting to be from San Joaquin County Bar Association with the domain address similar to “member-sjcbar.org”, please disregard it. Do not respond to it. Do not click any links that may come from it.