CNET también está disponible en español.

Ir a español

Don't show this again

Internet

Australia Post scam email linked to Russian phishing site

A scam email, linked to a Russian phishing site, has been warning Australia Post customers that they need to pay to retrieve an uncollected parcel.

australiapost.jpg
Australia Post

Australia Post has warned customers to avoid a fake 'courier' email scam, purporting to charge recipients for uncollected parcels.

The email was reported by customers during July and detailed that "a courier did not deliver" a parcel to the customer's address, and that Australia Post "will have the right to claim compensation" for storing the unclaimed package.

The email also includes links to "download information" about the undelivered parcel, as well as links to unsubscribe, that CNET understands were links to a phishing site. The email was sent from a number of addresses including info@aust-post.com, infor@aus-post.info, info@aus-post.biz, info@auspost.biz, info@aust-post.net and info@aut-post.com.

Recipients have been advised that Australia Post does not charge customers to collect packages or to have their parcels stored, and have been warned that the email should be deleted without a response. Affected customers are also advised to contact the Australian Competition and Consumer Commission's ScamWatch.

australiapostscamimage.jpg
A copy of the scam email received by some Australia Post customers. Australia Post

In a statement Australia Post advised that it had "received notification from the Australian Communications and Media Authority of a new phishing site (originating from Russia) using Australia Post branding" and that it "actioned a takedown of this site within 24 hours".

The Australia Post scam comes as another major security issue has been reported out of Russia, with Russian hackers gaining access to more than 420,000 web and FTP sites, amassing more than 1.2 billion passwords in the process.