Beware of this fake email allegedly from the “Australian Taxation Office” being sent by the phishing domain name “atogov.email”. The Word doc file attached is undoubtedly Ransomware.
Coming up to Christmas time, but still, some people have absolutely no sense of morals.
The bogus domain name “atogov.email” makes this scam quite easy to spot. And we all well know that any file attachment received from a suspicious source should never be opened. Nevertheless, here are the details.
The phishing email message
From: Australian Taxation Office <Secure.Documents @ atogov.email>
Subject: Secure Documents
File Attached: ATOGov_18122016.doc
Date Received: Monday, 19th December 2016
Australian Taxation Office official logo
Please find attached your secure documents. Please review, complete and return completed documents via email to ATOffice @ ato.gov.au.
If you have any queries relating to the above, feel free to contact us at: MNatooffice @ ato.gov.au
Please note: You must "Enable Content" in order to view secure documents.
Who owns the domain name atogov.email ?
Domain Name Owner Search : atogov.email
Creation Date: 2016-12-19 (19th December 2016, today !)
Registrant Name: Registration Private
Registrant Organization: Domains By Proxy, LLC
Registrant Street: DomainsByProxy.com 14747 N Northsight Blvd Suite 111, PMB 309
Registrant City: Scottsdale
Registrant Province/state: Arizona
Registrant Postal Code: 85260
Registrant Country: US (USA)
Unfortunately “Registration Private” conceals the domain owner's identity. But the domain name does already appear on a couple of Spammer Blacklists. This phishing email abuse of service incident has been reported to the domain registrar GoDaddy in the USA.