Phishing attack prevention: how to identify and avoid phishing
Bombardier would like to remind you to remain vigilant against fraudulent emails from individuals falsely identifying themselves as members of Bombardier’s Accounts Receivable team. These emails may contain malicious attachments or information (i.e. false Bombardier banking information) that may invite you to make a payment to an illegitimate recipient. Bombardier is committed to protecting the security and privacy of everyone it does business with, and we do not request sensitive information in any of our electronic communications. As such, Bombardier recommends the application of the following precautions at all times:
Do not open any attachments unless they are from a trusted source. Bombardier Statements of Account and invoices are issued in .pdf and .xlsx format. Disregard links that are not .pdf or attachments, that link to a drive, or attachments with unfamiliar file names such as: “Invoice_SOA.html” or “Bank Data Bombardier Aerospace.docx”.
Do not trust the email sender if the “From” name does not match the email address and does not contain an “@aero.bombardier.com” email extension.
Bombardier Accounts Receivable emails originate from account.receivable@aero.bombardier.com, but other communications/invoicing may come from other groups as it relates to invoicing and payment (i.e. CR&O, Parts Services, etc.)
Please ensure that the email you received has not been tampered with or spoofed, even if the “From” name does contain an “@aero.bombardier.com” email extension. When in doubt, please check with your IT department or call our accounts receivables representatives directly to verify.
Be suspicious of any email requesting you to change banking details or wire transfer information – contact your Bombardier representative if in doubt.
Do not provide any information and do not enter your user ID or password from a link in an email unless you are certain the site is legitimate.
Do not click on any links in an email unless they point to a legitimate Bombardier site when hovered over and you are certain the site is legitimate.
All our remittance information is clearly indicated on both our invoices and your monthly statements of account. Bombardier strongly recommends you report all suspicious emails to your internal IT or Information Security group. Should you have any doubts or suspicions concerning any emails from Bombardier, please contact our Information Security Team at cybersecurity@bombardier.com. Additionally, you may wish to contact your country’s respective anti-fraud centre (for example: Homeland Security) to report the occurrence. Should you have any questions or concerns regarding your Bombardier account, please do not hesitate to contact your Receivables Analyst, the Customer Response Centre (CRC) or your Field Service Representative (FSR).