Scam Alert: Dropbox, MailChimp, ATO and MYOB

Watch out for scams impersonating Dropbox, MailChimp, The ATO and MYOB

Beware of opening phony emails impersonating Dropbox, MailChimp, the ATO and MYOB. All emails are well-designed impersonating prominent Australian brands with malicious content.

1. Dropbox

Scammers regularly target Dropbox due due to the significant number of users and its global use. The link directs to a fake Office 365 site requesting asking for personal details and redirecting to a malicious PDF file.

2. MailChimp

Scammers are hijacking accounts from unsuspecting MailChimp users and distributing phishing scams. The email contains links to archive files containing a malicious JavaScript File.

3. ATO Scam

The ATO-branded email is well-timed with the end of FY17, given the impending October 31 deadline. The send has forged domain ato.com, a legitimate domain based in Chicago. 

Clicking the link directs you to a well-designed phony MyGov website prompting you to provide your credit card, driver’s license, email and password. 

4. MYOB payload email scam

The phony MYOB email scam directs to a compromised SharePoint site hosting a ZIP archive with malicious JavaScript.