Category: Email Phishing

Wrong Delivery Address

Wrong Delivery Address

Here is another new Spam email. Another one purporting to be from DHL. Is this legitimate? No it absolutely isn’t.

A couple of things to note. The attachment is a .img file. A IMG file is something which windows will now open automatically, and then launch the autorun.inf file. This probably contains potentially harmful content which we really don’t want. Secondly, the email address isn’t correct for this company either.

What should you do? I would encourage that all attachments that are IMG or ISO files are blocked.

CRITICAL ACTION REQUIRED: Mailbox de-activation notice

CRITICAL ACTION REQUIRED: Mailbox de-activation notice

Another example of a fake email.

When you look at the email, it is not formed in a very good manner. This type of email is used to gain your email account username and password. Click on the link will take you to a page to enter your username and password, which they will then use to gain access to your emails and/or systems. Take a look at the senders email address and name. Also the use of colours in this type of email is unusual.

Now if you hover over the link, you will see the site it takes you to is certainly nothing like you have probably been to before. The safest bet is to pass it only your system administrator.

Just received a FAX document?

Just received a FAX document?

Here is another example of another junk email purporting to be legitimate.

What is deceiving about this one? Firstly, OneDrive isn’t going to be sending you a fax. You’d expect that this will be something coming from your business email address, and not a random email account as shown in the image. Usually, I would tell people to hover their mouse cursor over the link in the email (“Click Here to view Fax Document”).

When you hover over the link in this email, you will notice the link is going to a sendgrid URL, which is a legitimate service. But, even the bad people use legitimate services to deliver a payload. The other oddity is the fact that the other three links (click here, Privacy and Legal) just simply don’t work.

If you do happen to click on the link, sendgrid is pretty quick to remove these from their services, after all, you don’t want to taint your reputation. Even though this email came in only about 20 minutes ago, they have already removed the link

As always, if you are unsure of the sender or the content, the safest bet is to delete the email.

I own your information!

I own your information!

Here is an example of another fake email. How can you tell?

  1. Terrible spelling
  2. Bad grammar
  3. Hyphenated words that don’t need it
  4. The timer will work when you see this letter

Nothing really stands out about this email does it? For a start they are using the same email address as the recipient. If your system is configured correctly, you shouldn’t get this email in the first place.

Have you ever got an email like this, or did you recently get one? If you’re not sure, please feel free to contact us.

Theme: Overlay by Kaira Dedicated and Reliable Computer Support.
Brisbane, Queensland, Australia