ATO Ransomware Phishing Emails

Categories » » All Pages
19th December 2016

Beware of this fake email allegedly from the “Australian Taxation Office” being sent by the phishing domain name “”. The Word doc file attached is undoubtedly Ransomware.

Coming up to Christmas time, but still, some people have absolutely no sense of morals.

The bogus domain name “” makes this scam quite easy to spot. And we all well know that any file attachment received from a suspicious source should never be opened. Nevertheless, here are the details.

The phishing email message

From: Australian Taxation Office <Secure.Documents @>
Subject: Secure Documents
File Attached: ATOGov_18122016.doc
Date Received: Monday, 19th December 2016

Australian Taxation Office official logo

Secure Documents

Please find attached your secure documents. Please review, complete and return completed documents via email to ATOffice @

If you have any queries relating to the above, feel free to contact us at: MNatooffice @

Please note: You must "Enable Content" in order to view secure documents.

Who owns the domain name ?

Domain Name Owner Search :

Creation Date: 2016-12-19   (19th December 2016, today !)

Registrant Name: Registration Private
Registrant Organization: Domains By Proxy, LLC
Registrant Street: 14747 N Northsight Blvd Suite 111, PMB 309
Registrant City: Scottsdale
Registrant Province/state: Arizona
Registrant Postal Code: 85260
Registrant Country: US (USA)

Unfortunately “Registration Private” conceals the domain owner's identity. But the domain name does already appear on a couple of Spammer Blacklists. This phishing email abuse of service incident has been reported to the domain registrar GoDaddy in the USA.

More related pages …

Beware of suspicious email from reckonaustralia
Emails with a highly suspicious Report.xls Excel file attached are being sent out by, a domain name registered in Moscow, Russia on 20 November 2016. This message is definitely ...
India SEO Scammers Exposed pretending to be based in Australia
The recent avalanche of Search Engine Optimization emails claiming your website contains “meta-data related mistakes” purport to be from Australia. BUT NO. Investigation exposes their o...
Warning about DomainRegister letter that looks like an Invoice
Have you just received a letter from “DomainRegister Pty Ltd” that looks very much like an Invoice asking for payment to register a domain name? Well, do read the fine print very carefu...