Fake Origin Energy Electricity Bill Phishing Emails

14th June 2017
Article Publisher

"Here's your latest bill from Origin showing what you've used and how much to pay." Yeh right ! It is just another fake phishing email, this time sent from the phony domain "energyoforigin.net"

Those who actually do have an account with Origin Energy can instantly recognise the message is fake because :

  1. originofenergy.net is a bogus domain name deliberately selected to deceive the unwary.
  2. Hovering your mouse over the " View Bill " button reveals a hyperlink to an unfamiliar and highly suspicious website, which is actually a compromised Microsoft SharePoint account containing dangerous Malware. As you know, this is exactly the type of link that you never click !

Owner of the domain originofenergy.net

This domain name was registered only yesterday, Tuesday, 13th June 2017 in China, likely using a false name.

WHY ? Because there have been reports of these Origin Energy phishing messages having been sent in recent weeks from differing domain names, which will all have now been Blacklisted. So, they just setup another domain and continue their email scam.

originofenery.net domain owner whois information

Source of the email message

Viewing the email header code reveals the message originated from the IP address 91.121.84.203, which is a mail server located in Paris, France.

originofenergy.net mail server IP address and location

Now a familiar pattern

Nothing new here. We have seen it all before. Check out the other articles below.

The same cybercriminal crew registering domains in China with mail server located in France sending emails containing a dangerous link to a compromised Microsoft SharePoint account URL.

While Government authorities do warn the general public about emails like this and recommend people report scams to websites like Scamwatch, until such time as somebody actually takes positive action to track down the perpetrators, the activites of these cybercriminals will continue unimpeded.

 
Comments

All feedback much appreciated.

Add your comment ⇒

You may also be interested in …

Fake MYOB Invoice Phishing Emails
0
Fake ASIC Business Name Renewal Phishing Emails
0
1
Traffic Infringement Phishing Email Scam
0
1
Beware of suspicious email from reckonaustralia.org
0