Office Products News

Officeworks hit by email scam

11 July 2018

A fake Officeworks invoice is doing the rounds.

Officeworks is among a number of big name retailers to be hit by a fake email scam.

The bogus Officeworks email was picked up by cloud-based email management provider Mimecast last week.

The email purports to be from Officeworks but the sender is ‘Scott Graham’ at a website named ‘Project Absurd’.

The email contained a link prompting recipients to download a malware which appeared to be a banking trojan via compromised Sharepoint sites.

"This is another example where the trust in well-known brands is being used to socially engineer people into clicking a link in a phishing email," Mimecast principal technical consultant Garrett O'Hara said.

"We hope that end users will see the email doesn’t come from Officeworks. At this time of year phishing campaigns will use branding for well-known online stores given their EOFY [end of year financial] sales,” he said.