MailGuard Blog

NSW Roads and Maritime Services becomes another victim of brandjacking by cybercriminals. 2 variants of hoax emails supposedly sent by the government agency arrived in inboxes yesterday.

Cybercriminals brandjacked Office 365 and sent bogus emails to recipients on Tuesday afternoon as part of a phishing attack.

The emails, seemingly sent from ‘Messages Portal Centre Messages Portal Centre’ trick recipients into thinking that their account has been put on hold until they ‘confirm activity’.

It encourages users to click on a View ‘Activity’ link that leads to a compromised website.

The website page opens to a fake Office 365 login page. Users are then instructed to enter their password on this page to proceed further.

The scam is a classic example of a phishing attack that cybercriminals launch in a bid to steal confidential passwords from recipients. 

How to avoid getting scammed

Phishing attacks can be enormously costly and destructive and new scams are appearing every day. Don’t wait until it happens to your business; take action to protect your company, now.

Always hover your mouse over links within emails and check the domain they’re pointing to. If they look suspicious or unfamiliar don’t open them.

9 out of 10 cyber-attacks are delivered via email, so it's essential to have the best filtering service available. 

Don’t be fooled if you receive an email citing an electricity bill from AGL – you may end up paying more than just the bill.

AAMI Insurance is the latest company to be brandjacked by cybercriminals in a series of email scams compromising MailChimp accounts.

In the biggest week of football finals, and coinciding with a surge in upcoming seasonal events, comes the latest email scam that invites recipients to ‘Download and Print Your eTickets.’

If you see this message show up in your inbox, please delete it; it’s a phishing attack.

Although it’s been designed to look like an innocuous notification message, the “view completed document” link actually points to a phishing page - shown below - set up to harvest people’s email login credentials.   

MailGuard has detected a new phishing attack exploiting the trademarks of the Law Council of Australia, Office 365, Yahoo, GoDaddy, Hotmail, AOL, The Law Institute of Victoria, and many others.

This phishing attack is aimed at collecting the login names and passwords of victims.

If you get a LinkedIn networking invitation from “Professor Barry James Marshall” in your inbox don’t click.

MailGuard has discovered that the fake LinkedIn notification email shown in the screenshot above, is actually a phishing scam designed to harvest your LinkedIn login credentials.

We've blocked a malicious email scam brandjacking One Drive.