Fraudsters are targeting Australian users with scam emails that contain malware-laden fake bills from a legitimate energy provider.
At 08:30 on 10 May, tens of thousands of Australian users began receiving emails from what appeared to be Origin Energy. The messages contained the logo for the Sydney-based energy provider, included a URL linking to the privacy page on the company’s website, and adapted to both desktop and mobile screens. To add an even greater degree of legitimacy, they listed the plausible address “originenergysolar.net” as the sender email.
As for the bills themselves, clicking on the “View bill” link downloaded spyware onto the email recipient’s computer.