MailGuard Blog

A Xero malicious email campaign was detected and blocked by MailGuard today. The invoice, designed to look like it was sent through the Xero accounting platform, encourages the recipient to click through to view the invoice.

Frequently targeted ASIC and CBA have again been impersonated in new email scams circulating from this morning (AEDT). These scams are particularly deceitful as they are so well-crafted, with no grammatical errors and on-brand formatting.

The ATO and MYOB, regular victims of brand-jacking by cybercriminals, have again been targeted today in large-scale email campaigns. The first ATO-branded email was detected at 8.22am AEST, and the MYOB-branded email at 8.50am AEST. MailGuard has blocked 100% of these emails, and as both attacks are ongoing, we are monitoring for variants.

The barrage of criminal intent email campaigns masquerading as popular SMB and consumer brands Telstra and Xero continues today. The very large-scale attacks were detected from 9.03am AEST September 26, and are ongoing. Whilst 100% of these emails were blocked by MailGuard, we are monitoring for variants.

A succession of small to very large phishing campaigns impersonating major Australian brands Telstra, the ATO (Australian Taxation Office) and Queensland tolling payments provider GoVia, have been blocked by MailGuard in the past 24-hours.

Another large scale run of fake ASIC emails was deployed yesterday. The first message was delivered at 08:46:21 AEST on the 23^rd August, and purports to be an ABN registration renewal notification.