Australia Post continues to be popular among cybercriminals looking to trick users, especially as we approach the End of Financial Year (EOFY).
MailGuard has intercepted a new phishing email scam that pretends to be an alert from AusPost, which leads to fraudulent pages using AusPost branding.
Titled ‘AUPost/ Your package is about to return’, the email uses a display name of ‘Post Center’ and contains Australia Post’s logo, along with a ‘Priority Mail Express Confirmation Number’.
However, the domain used in the sender address doesn’t belong to Australia Post but actually originates from a potentially compromised server hosted overseas.
“The email informs recipients that a package they will receive tomorrow will be returned due to a ‘wrong shipping address’,” MailGuard said.
“It directs users to pay ‘extra fees online to submit a new delivery…