Telstra bill? Bin it. Australian inboxes targeted by sophisticated phishing scam
Wednesday, September 18, 2019/
A new phishing scam posing as Telstra is targeting Australian inboxes and all recipients are urged to delete the email immediately.
First noticed on Monday by online security firm MailGuard, the scam is especially sophisticated thanks to the consistently convincing visuals and branding across the email and linked website. It also features authentic markers such as a ‘Live Help’ button.
“A key feature is the inclusion of the sentence ‘If you have any questions or concerns about this email you can get in touch with us at telstra.com/contact’,” MailGuard’s statement reads.
The well-formatted email will look familiar to existing Telstra customers and asks users to click through to an attached bill. Although there are no attachments, a link is provided.
The link redirects through Tumblr to a fake Telstra login page.
Once logged in, recipients are directed through to a payment page.
The cyber criminals can then view and save user and payment credentials for further illegal activity.
All fake bills reported have shown the same account number.
The Australian Competition and Consumer Commission (ACCC) earlier this year warned businesses, in particular, to be on alert after its Targeting scams report revealed a total loss of over $7.2 million last year.
Protect yourself and your business
Writing for SmartCompany, Cynch Security co-founder Susie Jones describes cyber security as “a long game”, urging users to build resilience to cyber attacks through “incremental steps” similar to a physical fitness regimen.
Simple steps such as avoiding duplicate passwords, then graduating onto more advanced steps such as investing in a password manager, creates habits that will better protect your organisation in the long run, she writes.
“The most important thing when it comes to building cyber fitness and improving your resilience to threats is to start doing something, anything, to improve.”
For phishing scams like this, MailGuard recommends recipients delete the email immediately from their inbox without opening attachments or clicking on links.
The ACCC has also set up Scamwatch, a site where community members can report scams. However, it does warn users it cannot help in the recovery of lost funds.
Amantha Imber runs a successful business — but she still has impostor syndrome Amantha Imber Inventium founder
Social media isn't about numbers, it's about connection Carlii Lyon Carlii Lyon PR founder
"My early decisions were rooted in fear": How good hires can set small business owners free Nancy Youssef Classic Finance founder
"No staff turnover": Business success hinges on a thriving company culture David Fazio Mate co-founder
Five ways to mentally prepare for the brutal capital-raising process Stacey Fisher Minnow Designs co-owner
In the age of online shopping, it's retail staff that make or break businesses Cal Doggett Properties & Pathways director