Optus MyZoo fraudulent email - SSO-AD2008-016

23 October 2008

Software and platforms affected

None.

What is the problem?

A new fraudulent email is circulating which is pretending to be from Optus.  This is a scam directed at people who use Optus Internet services. 

If you follow the instructions in the email, criminals may capture your Optus email username and password.  This allows them to access your Optus email account, send spam from your Optus email address, impersonate you online or steal your personal information to facilitate fraud in your name.

The email mentions a "recent upgrade in our server" and then asks you to click a link to "confirm your account".

Other Internet Service Providers have been the target of phishing scams like this which are designed to capture your email account username and password.

What we recommend you do

If you receive an email similar to this one, do not reply or click on the link in the email - simply delete the email.

If you have already clicked on the link and responded to the request for information, the information you supplied including your username and password for your Optus web email account has probably been captured by a criminal.  You should change your password for this account immediately and contact Optus:

http://www.optus.com.au/contactus

Where you can find more information

See the Stay Smart Online Fact Sheet:  Protecting yourself from phishing attacks and the Department of Broadband, Communications and the Digital Economy's Phishing - Don't Take the Bait.

Disclaimer

 This Advisory has been prepared by AusCERT for the Department of Broadband, Communications and the Digital Economy.

The information is intended for used by home users and small to medium sized businesses and is general information only and not intended as advice and was accurate and up to date at the time of publishing. The material and information in this Advisory is not adapted to any particular person's circumstances and therefore cannot be relied upon to be of assistance in any particular case. In any important matter, you should seek professional advice relevant to your own circumstances.

The Commonwealth, AusCERT, and all other persons associated with this Advisory accept no responsibility or liability for information either included or referred to in the Advisory. No responsibility or liability is accepted for any damage, loss or expense incurred as a result of the information contained in the Advisory, whether by way of negligence or otherwise.

The listing of a person or organisation in any part of this site or Advisory does not imply any form of endorsement by the Commonwealth of the products or services provided by that person or organisation. Similarly, links to other web sites have been inserted for your convenience and do not constitute endorsement of material at those sites, or any associated organisation, product or service.

Please note that material in this Advisory, as the case may be, includes views or recommendations of third parties, which do not necessarily reflect the views of the Commonwealth, or indicate its commitment to particular course of action. Material on this site or in this Advisory may also include information provided by third parties. The Commonwealth cannot verify the accuracy of information that has been provided by third parties.

 

---