On October 19, 2026, a his.com customer account was hijacked and used to send phishing spam to a number of his.com addresses. This message had the title “You have a New Activity” and claimed that the recipient’s account had been logged into from Russia. The message contained a link to “Review Login Activity“. This led… Read More: Alert: phishing email sent from his.com account »
We’ve seen phishing mail claiming to be from Amazon, saying that there’s a problem renewing your Amazon Prime membership: This links to a site in India, where the bad guys hope to harvest your Amazon username and password. If you receive email that looks suspicious, don’t click any links in the email. In a case… Read More: Phishing mail claiming to be from Amazon »
A his.com customer email account was hijacked and used to send phishing mail to other his.com addresses that claimed to be from error-billing@his.com, asking recipients to log on to “retract the multiple charges”. Following this link would take you to a real-looking copy of a Zimbra email login, where logging in would reveal your password… Read More: Phishing mail claiming “multiple billing error” »
Phishing mail from forged address “billing2023@his.com” was received by some his.com mailboxes today, 11/28/2023. Most phishing messages like this one are blocked by our spam/virus/phishing filters, but some copies of this particular message got through. The body of the message looks like this, with the HIS logo. The message came from an IP number in… Read More: Phishing mail to his.com addresses from “billing2023@his.com” »
We’re seeing quite a few email messages that claim to be about an invoice you haven’t paid and have PDF attachments supposedly from Docusign that you’re supposed to look at. They’ll have subject lines like “Delayed Payment Penalty Notification”. You probably won’t recognize the supposed sender as somebody you do business with, and if you… Read More: Phishing mail with “Docusign” attachments »
We’re seeing a flood of “phishing” email – this is spam that is designed to trick you into revealing your login information for email, bank, PayPal, Costco or other important site. The quantity of this mail is up by several orders of magnitude, and while our spam filters block or quarantine 99+% of these, that… Read More: How to recognize “phishing” email »
We’re seeing an increased number of “phishing” email messages, where the bad guys are trying to trick you into entering your email account login info, where it’s used to compromise your account. Here’s an example of a message that appeared today. The “click here” takes you to a site in Indonesia where you’re prompted to… Read More: Phishing Email »
We’ve just seen spam that’s supposedly from intuit.com (Quickbooks, etc.) with subjects like “Sales Receipt” or “Purchase Order Receipt” with an attached spreadsheet file. This is a malware attack designed to trick you into opening the spreadsheet, which will install malware on your computer. These are not from Intuit – most are from hacked servers… Read More: Malware warning – fake “Sales Receipt” email from intuit.com addresses »
We’re seeing more phishing email aimed at Zimbra accounts. This example came from a hacked account in Sri Lanka, claiming to be from “Zimbra Webmail Team”: Your Mail Box Exceeded it storage limit CLICK HERE TO UNBLOCK or use the link below Fill and click SUBMIT for more space or you won’t be able to… Read More: Phishing email from “Zimbra Webmail Team” »
Our multi-layer Barracuda spam/virus/malware filtering is very effective, but some bad things do slip through when the bad guys come up with new tricks and send email before the spam filters get updated. Here’s an example that came in today, claiming to be from Chase and asking the recipient to correct something about their account. … Read More: Phishing email – proceed with caution »