Convincing Phishing Scam

by tnolen

Comment Closed

Apr 25, 2018

April 25, 2018 – We have become aware of a very convincing phishing scam being sent to our users this morning. It comes in the form of an email with the subject of “Mail Delivery Failed for <your email address>”. The body of the messages is as follows:
–BEGIN

This message was created automatically by mail delivery software.

You have more than 6 incoming messages that could not be delivered to your inbox since April 25 2018 for <your email address>

The following address (es) failed and reconfigure Port 486, Retrieve Messages

Diagnostic-Code: smtp; 552-5.7.0[TSS04] max defers and failures per hour (Exim 4.88) allowed. Message deferred

Reporting-MTA: dns; gateway31.websitewelcome.com
X-Postfix-Queue-ID: 5867033100
Original-Recipient: rfc822; <your email address> SIZE=22481:
Arrival-Date: Wed, 25 Apr 2018 04:14:44 -0500 (CDT)

Action: failed
Status: 5.7.0
Remote-MTA: dns; gmail-smtp-in.l.google.com

–END

If you click on the link that says “Retrieve Messages”, you will be taken to an website asking for your email address and password. This is a FAKE web page designed to harvest your login information. This information could be used to retrieve your emails and/or send emails through your email account. Additionally, if you use the same password on your email as other accounts, those accounts could be compromised. This is a very convincing and new form of phishing attack, so please be aware of it.

If you have any questions concerning this, please email support@internetpro.net or call 256-547-6817.