password BV1 to open a link in Phishing email?

We have today (03/11/2022) noticed a huge surge in targeted phishing emails hitting business and personal accounts. One common factor in these emails seems to be “password BV1” supposedly to access documents in a link.

Password BV1 Phishing Emails – Which hacking group?

It’s clear this is a targeted campaign to breach email accounts from a hacking group. The common use of the text “Password BV1” suggests all these emails are coming from the same group.

Although the emails generally contain a genuine email chain which has clearly been compromised by the hackers accessing another account, there is also a lot of broken English.

In some of the emails we have observed, they have simple mistakes in such as “Check, review and sign this contract as well:”

They have also been saying “Good afternoon” when the emails have been delivered in the morning.


Why are the hackers adding “Password BV1” in the email?

In the emails we have observed, it appears as if the hackers are trying to encourage the target to click and open a link. By saying there is a password to access the document, it suggests this is a secure attachment.

What Should You Do About This?

This email phishing campaign seems to be widespread at the moment, we are seeing multiple reports on social media as well. Please warn all employees within your business about this and the increased risk of targeted phishing utilising previous genuine emails.

You may also find some of our other resources useful below:


Why Small Businesses are at Higher Risk of Cyber Attacks

All businesses are at threat from Cyber attacks, however, small businesses are at higher risk for many reasons.

How Hackers Easily Target Businesses

You might be thinking, how do hackers decide on which businesses to target? What if your business is on their list?

Most Common Types of Phishing Scams

In this video, We explain the most common types of phishing scams and how you can avoid being caught out tby them.

Get In Touch.

If you have any questions about data breaches and how your business can avoid them, feel free to contact us by calling 01158 244 824 or email us using the button below.

5.0 95 reviews

  • Avatar Debbie D. ★★★★★ 3 weeks ago
    Great service so far what with me being a new starter, & I've heard really positive things about Reformed IT from many of my colleagues, so I have no doubt this great service … More will continue!
  • Avatar Chloe J. ★★★★★ 4 months ago
    Reformed IT always provide excellent service and support. Since working for Walton and Allen the team have always been fast to resolve any IT issues I have had. Thank you for all of … More your help 🙂
  • Avatar Emily S. ★★★★★ 4 months ago
    Reformed IT are beyond brilliant, anytime I have called in need of help since working for Walton & Allen, nothing is too much trouble, they have resolved any issue with ease.
    … More staff are always happy to help, friendly service every time. It can be stressful when your job is based mostly on a computer, and there is some kind of problem you are unsure how to resolve, but with Reformed IT just a phone call away, it is so re-assuring to know that anytime I hit a roadblock, you guys are there to save the day!
    Big thanks to you all, be lost without you guys!
  • Avatar Steve C. ★★★★★ 4 months ago
    Reformed IT have been providing co-managed IT and Cyber Security services to us for just over a year and have never performed less than superbly. Rare to find a company as responsive … More and easy to deal with. I learn something new almost every time I talk with them, highly recommended!