Overview
There is currently an email scam going around where notification that appear to be from Australia Post are sent to users. The notification typically mentions that a package couldn’t be delivered “because nobody was at home” and contains a link to a fake Australia Post website. On visiting the site, one of several spams may take place. In some instances users will either be prompted to enter personal/financial information to get their package, at which point their details are stolen. Other examples involve users being instructed to download a file for printing, and once the file is opened their computer is infected. Computers that become compromised usually get infected with ransomware which encrypts the users files, and provides instructions by which they can pay a “ransom” fee to have the files unlocked. It is imperative that you do not pay this fee. The only way to recover the files is from previous backups, if they are available.
The following is a list of known domain names being used in this scam:
- aupostalservice.com, aupostalservice24.org, aupostal-service.com, au-postalservice.com
- austpost-trackforce.org, austpost-tracktrace24.org, aupost-tracktrace.info
- auspost-portal.info, auspost-portal24.net
- auspost24.net, auspostweb24.com (or biz, org, info, net)
- auspost-trackit24.com, auspost-track24.net
- aus-tpost.net (or biz, org, info)
- auspost-home.com (or biz, org, info, net)
- auspost-trackit.com (or biz, org, info, net)
- australia-post.net (or biz, org, info)
- eparcel-tracking.com (or biz, org, info, net)
- au-stpost.net (or biz, org, info)
- aus-tpost.biz
- aust-pst.com (or net, org)
- auspost-eparcel.com (or biz, org, info, net)
- austp.net
- austpst.org (or info, net)
- auspost-tracking24.com (or biz, org, info, net)
- auspost-tracking.com (or biz, org, info, net)
- austpost-tracking.org
- austpost-eparcel.com (or biz, org, info, net)
- auspost-parcel.com (or biz, org, info, net)
- auspost-delivery.com (or net, org)
- aust-post.com (or biz, org, info, net)
- aus-post.com (or biz, org, info)
- auspost.biz
- au-post.com (or biz, org, info, net)
- autpost.net
- aut-post.info (or biz, su)
- aust-post.net (or org)
- aust.su, aust.pw
- delivery-service.net
- postaust.com (or biz, org, info, net)
- postaut.info (or net)
- postaust.com
- postconfirm.com (or net)
Australia Post have released an official notification on their website which can be found here: https://auspost.com.au/about-us/email-scam-warning-jul-2014.html