Burges Salmon having seen its site cloned by a bogus firm ? Owen & Harvey Solicitors ? using the names, images and details of a number of genuine solicitors and other content owned by the firm. As such, we’re well placed to explain some key actions businesses can take.
What was different about this attack? Website cloning is becoming increasingly common and it is an issue we find ourselves assisting clients with more and more. The Owen & Harvey scam was different to the types of scam we usually see because the bogus firm not only used our website content almost in its entirety, but used our registration number, SRA number and VAT number in an attempt to hold itself out as a genuine, regulated firm. Owen & Harvey also used the photographs and profiles of a number of our solicitors. In some cases, the solicitor’s real name was changed to a fake one, but all other details about them remained the same.
Facing a website attack? Top tips to help you shut down a bogus site(1) If you are a regulated body and your registration details have been used, notify the regulator (e.g. the SRA or FSA). Similarly, notify Companies House and HMRC if your company number and VAT number are being used. The SRA and FSA should respond quickly and will usually publish a scam alert on their websites. (2) Post a scam alert on your own website. This doesn?t have to be searchable on your business?s website if preferred, but it should be searchable in Google or other search engines. (3) Ensure both the SRA?s and your own scam alerts rank at the top of Google search results so they appear above the bogus website. (4) Conduct a free “WHOIS” search to identify the owner of the domain name that the scam website is operating from (although do not be surprised if the domain owner has anonymised their details using a privacy protection service ? it is common for scammers to do this). (5) If details are available, send a “cease and desist” letter to the scammer using the contact email address provided on the website, and also the contact email address provided for the website?s domain name. The chances of receiving a response are slim, but sometimes it does prompt the scammer to take down the website of their own accord. (6) Whether you write to the scammer directly or not, lodge a complaint or “takedown” request with the website?s internet service provider (ISP) as this is usually the most effective way to get the website taken down. a ? In order to identify the ISP, review the WHOIS search results for the domain name ? he ISP might not be named, but the IP address should be (look for a multiple-digit number, for example 155.94.65.142). b ? Enter the IP address into www.arin.net or another similar tool and this should reveal the identity of the ISP that is hosting the website on its server, as well as their contact details. c ? Most ISPs have a dedicated email address and procedure for lodging IP complaints so it is worth looking on the ISP’s own website to check this. The risks of not following these steps are clear. We dealt with its website attack quickly to mitigate the risk of confusion and more importantly, any potential long-term reputational damage. If not dealt with quickly scammers are likely to use bogus firms or entities as vehicles to commit fraud, which could result in members of the public being misled into trying to deal with the bogus entity (believing it to be genuine). This could in turn lead to the scammers trying to steal personal information from them. Businesses should remain vigilant and have a procedure in place to deal with attacks. Jeremy Dickerson is partner at Burges Salmon.With government research having unveiled that two-thirds of big UK businesses have been hit by a cyber attack in the past year, we took a look at some of the most recent and famous cases ? and why they were thought to have happened.
We use cookies on our website to give you the most relevant experience by remembering your preferences and repeat visits. By clicking “Accept”, you consent to the use of ALL the cookies.
This website uses cookies to improve your experience while you navigate through the website. Out of these cookies, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may have an effect on your browsing experience.
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.
