Scammers have sent out fake emails purporting to be from NZ Post in an effort to compromise people’s computers.
The emails, which are made to look like they come from NZ Post, advise “valued customers” that they have a parcel for pick-up and invite them click on a link to see the merchant invoice and tracking information.
The link is in fact a malicious executable file. There are some clues the email is a scam; it tells people to come with “a government issued ID card or any valid form of identification” to collect their parcel.
NZ Post spokeswoman Claire Pasley said it had just become aware of the scam after a call to its customer service centre. The emails were not from NZ Post and people should delete them, she said.
A Christchurch IT expert expected many people might fall for the scam as the errors were minimal and easily overlooked. “It mostly checks out until you hover over the link and realise you’re being redirected to an executable. I bet many end users would fall for it though.”
With many computer users inured to phishing emails from banks, scammers have increasingly been “spoofing” the email addresses of other organisations such as Inland Revenue and Trade Me to increase their chances of fooling people.
- © Fairfax NZ News