Phishing alert

Colin@afrihost

Colin@afrihost

Member
Joined
Jan 18, 2024
Messages
20
Reaction score
12
Don't get caught by this phishing email (attached screenshot). It's quite realistic and the quoted account number is in the right format, but the sender's address is obviously not Afrihost, and there is a warning, not visible in the screenshot, "If the balance on your account is not settled in full, your services will be suspended on 16th May 2022", oops!
But most concerning, the emails seem to target emails using domains that are hosted by Afrihost. I suppose this data could have been extracted from the ZARC WHOIS server, or has there been a security breach?
 

Attachments

  • Screenshot 2024-10-15 095732.png
    Screenshot 2024-10-15 095732.png
    182.3 KB · Views: 49
Hi.

This has been reported to the Security and NOC team.
 

Domains.co.za customer data leak?

So I get a phishing email from Domains.co.za to an alias inbox -only- used for Domains.co.za saying a domain I own failed to autorenew. A while later, an email from Domains.co.za warning about the phishing campaign. How did the actors obtain this email if it is just an alias I use for my...
mybroadband.co.za mybroadband.co.za

Maybe related?

Colin@afrihost said:
Don't get caught by this phishing email (attached screenshot). It's quite realistic and the quoted account number is in the right format, but the sender's address is obviously not Afrihost, and there is a warning, not visible in the screenshot, "If the balance on your account is not settled in full, your services will be suspended on 16th May 2022", oops!
But most concerning, the emails seem to target emails using domains that are hosted by Afrihost. I suppose this data could have been extracted from the ZARC WHOIS server, or has there been a security breach?
Click to expand...

Are they .co.za domains?
 
Colin@afrihost said:
Don't get caught by this phishing email (attached screenshot). It's quite realistic and the quoted account number is in the right format, but the sender's address is obviously not Afrihost, and there is a warning, not visible in the screenshot, "If the balance on your account is not settled in full, your services will be suspended on 16th May 2022", oops!
But most concerning, the emails seem to target emails using domains that are hosted by Afrihost. I suppose this data could have been extracted from the ZARC WHOIS server, or has there been a security breach?
Click to expand...

Hi

We are aware of this. Afrihost clients has been targeted by these scammers. The scammers used phished personal information to signup fake accounts with Afrihost. They deliberately don't pay these accounts or use scammed payment info and use the failed payment reminders we send via email to modify and phish more credentials.

Most of these emails target random [email protected] addresses which people most commonly use with their domains or @gmail @outlook.com emails that might have been compromised before.

Afrihost will NEVER ask you to click a link to make a payment.

ALWAYS visit clientzone.afrihost.com for any account-related info or payments.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X