Story image

Ezi Office Supplies site compromised in email phishing attack

06 Mar 2018

People who receive an email from Ezi Office Supplies should proceed with extreme caution as hackers may have taken over the company’s domain to spread malware.

The invoice email, appearing to be from Ezi Office Supplies, asks recipients to view their bill. Anyone who clicks the link is taken to a zipped file on the genuine Ezi Office Supplies website.

Those who download the file and unzip the file will then be hit with a JavaScript-based malware.

The sender, ‘account@eziofficesupplies.com.au’, also uses the genuine domain name, suggesting that the entire company’s website may have been compromised by hackers.

“On Feb 20 Ezi Office Supplies went on social media to warn their customers that they had been having problems with their email system. A post on the company’s Facebook feed stated 'If you have received an email from us - digitalenquiries please delete as it is a spam. Apologies if received already. Thank you’,” MailGuard explains.

People who receive an email from Ezi Office Supplies should proceed with extreme caution.

MailGuard has also detected a new type of phishing scam designed to mimic a Dropbox notification email.

The zero-day email scam displays the Dropbox logo to seem authentic – a common tactic used by cybercriminals to disguise their phishing attacks, explains Emmanuel Marshall in a MailGuard blog.

This time the message tells recipients that “You Have Received (5) pdf files sent to you via dropbox” and directs them to a link to access their files.

To add further urgency, the email says that the “file Will be deleted on = 5 March, 2018”.  It also uses Dropbox’s genuine PO Box details.

The email appears to originate from a person apparently called Dr()p-B()x!!  with the email address Holli@ccmech.com. The subject line, ‘Scan654464-87555!’ also appears.

According to Marshall, when recipients click the link to access the bogus files, they are taken to fake login pages that look like the real Dropbox website. Attackers then harvest login details.

Login harvesting is popular because attackers can then use the hacked Dropbox accounts to store malicious files. They could also sell the logins to other buyers who could then access genuine Dropbox documents as a means to conduct identity theft.

Telltale signs of email scams, according to MailGuard:

  • Generic greetings, such as ‘dear customer’
  • A sense of urgency, e.g. “ensure your invoice is paid by the due date to avoid unnecessary fees”
  • Bad grammar or misuse of punctuation and poor-quality or distorted graphics (this attempt isn’t let down by bad grammar, making it more likely some people will take the bait)
  • An instruction to click a link to perform an action (hover over them to see where you’re really being directed).
Research reveals the state of AI in Australian businesses
While Australian organisations are concerned about the impact of AI on society, the research suggests Australian businesses could be doing more to minimise the potential risks.
AWS announces the general availability of AWS Ground Station
Once customers upload satellite commands and data through AWS Ground Station, they can supposedly download large amounts of data over the high-speed AWS Ground Station network.
Citrix to extend Workspace to Google Cloud
“In expanding our partnership with Citrix, we can better help these customers with their transformations by enabling them to access and run the applications their businesses depend on anywhere—simply, flexibly and securely.”
Hybrid cloud security big concern for business leaders
A new study highlights that IT and security professionals have significant concerns around security for hybrid cloud and multi-cloud environments.
“First-of-its-kind” VR training platform launches in Oz
Curiious IQ is enabled for any VR device and can stream live to small groups or up to 50 or more headsets simultaneously.
GitHub launches fund to sponsor open source developers
In addition to GitHub Sponsors, GitHub is launching the GitHub Sponsors, GitHub will match all contributions up to $5,000 during a developer’s first year in GitHub Sponsors.
Check Point announces integration with Microsoft Azure
The integration of Check Point’s advanced policy enforcement capabilities with Microsoft AIP’s file classification and protection features enables enterprises to keep their business data and IP secure, irrespective of how it is shared. 
Why AI will be procurement’s greatest ally
"AI can help identify emerging suppliers, technologies and products in specific categories."