Read Time:1 Minute, 37 Second

Fraudsters have developed a new scheme to dupe Aussies by using fake myGov emails and targeting vulnerable victims. The scheme was reported to start surfacing right after the Christmas holidays.

According to MailGuard, a global email security firm, threat actors have been sending emails using a fake myGov account. And their scam was perfectly timed, as after the holidays, many people would want to have extra money after the holiday spending.

The security firm reported that the emails the victims received said they had an outstanding refund of $640.98 with myGov. And as with all typical email scams, it contains a malicious link that is part of the instructions for the intended victims to ‘accept a fast online payment’.

The victim will then be sent to a fake website that looks like the victim is visiting the actual myGov login page. According to MailGuard, “the sender name shows as “myGov,” and the email comes from “refund(at)my(dot)gov(dot)au. The email address is not associated with myGov. However, it looks similar enough to its legitimate address that it could trick an unsuspecting individual.”

This is not the first time myGov has been targeted by malicious individuals. According to CyberSecurity Connect author David Hollingworth, “Refund scams like this were reported in June, October, and November of 2022. Services Australia has a page dedicated to such scam alerts, though this specific one is not yet listed. myGov states on its Scams page how to avoid falling prey to such tricks.”

Hollingworth added that myGov never asked for sensitive information such as usernames and passwords. It will never send an SMS containing hyperlinks directing recipients to sign in to their myGov accounts.

MailGuard advises that users be vigilant with the emails they receive, not clicking links and being mindful of the contents of the email. The firm noted that there are telltale signs that give away the malicious intent of the email.

Happy
Happy
0 %
Sad
Sad
0 %
Excited
Excited
0 %
Sleepy
Sleepy
0 %
Angry
Angry
0 %
Surprise
Surprise
0 %
Previous post Weather and Cyber Incidents are Similar, Cyber Experts Say
Next post Cybersecurity is a Joint Responsibility of IT and HR