Alert Priority HIGH – Beware of targeted e-Toll and AusPost malware emails

12 September 2017

Beware of targeted e-Toll and AusPost malware emails
Numerous malware emails targeting e-Toll and AusPost customers are currently being circulated.
These scam emails use the same ‘View in OneDrive’ hook to entice email users to download malware onto their computer:

Screenshot of AusPost malware email


Don’t click on the ‘View in OneDrive’ link—it will take you to a web page where you will be advised to download a file that may install malware onto your computer. (At the time of issue the type of malware has not been confirmed, but is most likely ransomware.)
  • The AusPost scam emails may be sent from ‘AusPost Service Notification’, with a randomised subject line similar to ‘AusPost Track – 123456789 -100-98765 Monday September’.
  • E-Toll scam emails may be sent from ‘Road Service Notification’ with a subject line like ’E-toll account statement [1234567]- September 2017’.
  • AusPost and E-Toll emails containing links to other file sharing services such as Google Drive have also been reported.

What to do if you receive one of these scam emails
If you receive fake emails like these, delete them immediately.
To find out how to protect yoruself from malware, go to Stay Smart Online.

Thank you to those subscribers who have provided feedback to our Alerts and Newsletters. We are very interested in your feedback and where possible take on board your suggestions or requests.

This information has been prepared by the Attorney General’s Department (‘the Department’). It was accurate and up to date at the time of publishing.
This information is general information only and is intended for use by private individuals and small to medium sized businesses. If you are concerned about a specific cyber security issue you should seek professional advice.
The Commonwealth and all other persons associated with this advisory accept no liability for any damage, loss or expense incurred as a result of the provision of this information, whether by way of negligence or otherwise.
Nothing in this information (including the listing of a person or organisation or links to other web sites) should be taken as an endorsement of a particular product or service.
Please note that third party views or recommendations included in this information do not reflect the views of the Commonwealth, or indicate its commitment to a particular course of action. The Commonwealth also cannot verify the accuracy of any third party material included in this information.