Australia Post has warned customers to avoid a fake 'courier' email scam, purporting to charge recipients for uncollected parcels.
The email was reported by customers during July and detailed that "a courier did not deliver" a parcel to the customer's address, and that Australia Post "will have the right to claim compensation" for storing the unclaimed package.
The email also includes links to "download information" about the undelivered parcel, as well as links to unsubscribe, that CNET understands were links to a phishing site. The email was sent from a number of addresses including firstname.lastname@example.org, email@example.com, firstname.lastname@example.org, email@example.com, firstname.lastname@example.org and email@example.com.
Recipients have been advised that Australia Post does not charge customers to collect packages or to have their parcels stored, and have been warned that the email should be deleted without a response. Affected customers are also advised to contact the Australian Competition and Consumer Commission's ScamWatch.
In a statement Australia Post advised that it had "received notification from the Australian Communications and Media Authority of a new phishing site (originating from Russia) using Australia Post branding" and that it "actioned a takedown of this site within 24 hours".
The Australia Post scam comes as another major security issue has been reported out of Russia, withto more than 420,000 web and FTP sites, amassing more than 1.2 billion passwords in the process.