Origin Energy has had its brand used once again in a new email scam that hit inboxes on the morning of 29 August.
According to Origin’s twitter account, the energy provider received reports of email scams claiming to contain Origin bills.
Email filtering company, MailGuard, has picked up a “very large” stream of these emails from 8:55AM on 29 August.
According to MailGuard, the sending domain is drvenergy .com (altered), which was registered through a Chinese domain registrar a day before the scam started.
The compromised Sharepoint account link in the email has been taken down, previously these were used to host a .zip file containing malicious javascript file.
The emails come with Origin’s display name from a noreply @drvenergy. com (altered) address.
This is another in what has been a series of scams using the company’s name. The latest attack purporting to be from Origin, happened on 17 July, as MailGuard revealed at the time.
The fake emails were designed to trick people into clicking a link that would download malicious software to the recipient’s system.
Fake Origin emails started hitting Aussie inboxes in May, with tens of thousands of the bogus emails hitting inboxes on 10 May, according to MailGuard.
This was followed by subsequent waves of fake Origin emails in early and mid-June.
