Double Whammy: The Latest Phishing Scam Uses your ‘IT Support’ team to Install Malware

Posted by MailGuard on 29 July 2021 13:39:42 AEST

The latest phishing alert sees scammers impersonate the IT department of the targeted organisation in an attempt to steal email credentials and install a malicious file onto the victim’s computer.  Attackers have interestingly used a fake email address from American multi-national and shipping services company FedEx as the trusted name to lure victims into providing their details.  

A notable characteristic of this attack is the scammer's ability to use the name of your company or organisation in order to facilitate the phishing attempt. By purporting to be the victims internal IT services, the email advises the receiver that they have been ‘deactivated’ from a service (actual service not specified) by not having updated their email address. The rectification for this is via downloading the attachment that will apparently assist in updating this information. The wording and instruction in this email, if not looked at closely, attempts to mislead the victim into thinking that their online capability may be deactivated if the instructions are not followed. An easy trap for those who cannot afford to not have access to their company’s internal tech systems (which is usually the whole organisation).  

Read More

Worth A Double-Take: False Email Quarantine Alerts from ‘Outlook’

Posted by MailGuard on 27 July 2021 14:54:10 AEST

This recent email attack threatens to steal user login credentials masquerading as trusted Microsoft email web app, Outlook. With over 400 million Outlook users globally, there is a good chance that you and your organisation are at risk of data theft.  

A fraudulent quarantine alert is the bait used for a recent email phishing scam currently being intercepted by MailGuard. Cybercriminals have used Outlook branding to trick unsuspecting recipients into entering their credentials (email username and password) for use in future criminal activity.  

The email arrives as an alert informing the victim of several emails whose delivery has been prevented due to system errors. After which, a link is provided to coerce the victim into reviewing the falsely quarantined emails. Recipients may be tricked into believing that the email is from the ‘Notifications Team’ however it appears to have come from a compromised Office 365 Account.  

Read More

‘Urgent Order’ email packing a nasty payload

Posted by MailGuard on 23 July 2021 14:56:19 AEST

In what may appear to be simply a misdirected email, users who click on the ‘Order0076654.xlsx’ attachment are in for a nasty surprise. The attachment is a malicious payload that could result in devastating consequences for the user and their business.

Read More

Telstra phishing email scam – “Your contract has been cancelled”

Posted by MailGuard on 14 July 2021 14:49:07 AEST

In the latest email phishing campaign landing in inboxes, telecommunications carrier, Telstra, is being impersonated by cybercriminals in an attempt to trick users into handing over sensitive credentials.

Read More

Caution: OneDrive & Outlook File-Sharing Email Phishing Campaign

Posted by MailGuard on 09 July 2021 14:22:37 AEST

Email users take care, MailGuard is intercepting a fraudulent file sharing email scam that uses a Microsoft OneDrive template and links to two different phishing pages, one of which employs Outlook OWA branding, and the other has branding for the recipient company. The campaign is designed to harvest sensitive user credentials that can be used in subsequent attacks and/or sold on the dark web.

Read More

USPS email scam – “Missing information and delivery fee”

Posted by MailGuard on 02 July 2021 18:41:20 AEST

MailGuard is currently intercepting a fraudulent USPS (US Postal Service) email scam with the subject line “Missing information and delivery fee, [your name] – Update your informations”.

Read More

Think before you click: Phishing email masquerades as new message alert from LinkedIn to trick users

Posted by Akankasha Dewan on 24 June 2021 18:42:36 AEST

MailGuard has intercepted a fraudulent email purporting to be from LinkedIn, a popular e-networking tool used by millions of professionals worldwide. This is a phishing email designed to harvest the confidential data of LinkedIn users for malicious intent, such as committing identity theft.

Read More

Watch Out: Phishing email sent from compromised account claims to share a ‘secure’ document via Microsoft SharePoint

Posted by Akankasha Dewan on 18 June 2021 12:28:20 AEST

Launching phishing email scams via compromised accounts continues to be a popular technique among cybercriminals looking to deceive users. MailGuard has intercepted a new phishing email scam that originates from a compromised email account belonging to a user at Anglican Care, an aged care facility.

Read More

Don’t be fooled by this DHL-themed phishing email claiming ‘you have a package pending delivery in Terminal 1’

Posted by Akankasha Dewan on 09 June 2021 17:19:46 AEST

MailGuard has intercepted another phishing email that impersonates popular shipping company DHL, masquerading as a delivery alert in order to trick users.

Read More

Warning: Phishing email purporting to be from Australia Post claims your parcel will be returned

Posted by Akankasha Dewan on 04 June 2021 11:56:02 AEST

Australia Post continues to be popular among cybercriminals looking to trick users, especially as we approach the End of Financial Year (EOFY).

Read More

Watch Out: DHL-themed phishing email scam claims you have an ‘undelivered parcel’

Posted by Akankasha Dewan on 28 May 2021 14:51:07 AEST

As we head closer to the End of Financial Year (EOFY), cybercriminals continue using parcel delivery related lures to trick users.

Read More

Warning: Remittance advice email purporting to be from ‘Aussie Broadband’ leads to fake Microsoft-branded phishing pages

Posted by Akankasha Dewan on 28 May 2021 13:49:26 AEST

MailGuard has intercepted a phishing email scam that claims to deliver ‘remittance advice’ in order to trick users.

Read More

Scam Alert: Phishing email impersonating DHL informs users of a failed delivery attempt

Posted by Akankasha Dewan on 14 May 2021 18:26:24 AEST

Cybercriminals continue impersonating popular shipping company DHL in phishing scams designed to steal confidential data.

Read More

Don’t be fooled: Phishing email masquerading as delivery alert leads to fake Australia Post-branded pages

Posted by Akankasha Dewan on 14 May 2021 13:47:19 AEST

Parcel-delivery scams continue targeting inboxes as the End of Financial Year (EOFY) approaches. MailGuard has intercepted a new phishing email scam that purports to be a delivery alert, ultimately leading to fraudulent pages employing Australia Post’s branding.

Read More

Warning: Another DHL-themed phishing email scam intercepted as the EOFY approaches

Posted by Akankasha Dewan on 05 May 2021 19:02:07 AEST

International shipping company DHL is once again the subject of a phishing email scam intercepted by MailGuard.

Read More

    Something Powerful

    Tell The Reader More

    The headline and subheader tells us what you're offering, and the form header closes the deal. Over here you can explain why your offer is so great it's worth filling out a form for.

    Remember:

    • Bullets are great
    • For spelling out benefits and
    • Turning visitors into leads.

    Subscribe to email updates

    Recent Posts

    Posts by Topic

    see all