ATO Ransomware Phishing Emails

Categories » » All Pages
19th December 2016
Article Publisher

Beware of this fake email allegedly from the “Australian Taxation Office” being sent by the phishing domain name “”. The Word doc file attached is undoubtedly Ransomware.

Coming up to Christmas time, but still, some people have absolutely no sense of morals.

The bogus domain name “” makes this scam quite easy to spot. And we all well know that any file attachment received from a suspicious source should never be opened. Nevertheless, here are the details.

The phishing email message

From: Australian Taxation Office <Secure.Documents @>
Subject: Secure Documents
File Attached: ATOGov_18122016.doc
Date Received: Monday, 19th December 2016

Australian Taxation Office official logo

Secure Documents

Please find attached your secure documents. Please review, complete and return completed documents via email to ATOffice @

If you have any queries relating to the above, feel free to contact us at: MNatooffice @

Please note: You must "Enable Content" in order to view secure documents.

Who owns the domain name ?

Domain Name Owner Search :

Creation Date: 2016-12-19   (19th December 2016, today !)

Registrant Name: Registration Private
Registrant Organization: Domains By Proxy, LLC
Registrant Street: 14747 N Northsight Blvd Suite 111, PMB 309
Registrant City: Scottsdale
Registrant Province/state: Arizona
Registrant Postal Code: 85260
Registrant Country: US (USA)

Unfortunately “Registration Private” conceals the domain owner's identity. But the domain name does already appear on a couple of Spammer Blacklists. This phishing email abuse of service incident has been reported to the domain registrar GoDaddy in the USA.


All feedback appreciated.

Add your comment ⇒

You may also be interested in …