Justice Department eviction notice scam.

Do Not Click on the link.

The eviction notice phishing scam was easy to spot as the spray mail is addressed to Undisclosed recipients:
The use of time-based threats, and eviction notice kindly vacate the property of immediate effect, to force you into an emotional fear-based response. is evident in the phrasing of the subject and body copy.
Please find below eviction notice Kindly vacate the property with immediate effect.
Please note poor grammar and non-legal jargon from the Justice Department moreover the subject is eviction notice lower case. Note there are no contact details/email signature for Chauke Tinyiko Abel.

Scammers try to get you to open a PDF that runs a script and/or to click on a link masked by the HTML VIEW EVICTION LETTER HERE that directs you to a cloned phishing website to trick you into handing over information or installing malware on your computer or browser. Once the email is converted to plain text the URL behind the VIEW EVICTION LETTER HERE is  <https://kennethzaack.wixsite.com/my-site-1 Hover over links to see the URL masked by the HTML. If the link is shortener that is a major red flag for phishing.

Do not follow drive links, like Google Drive or Dropbox links, to download invoices or other content from unrecognised, undisclosed recipients.

If in doubt delete. 

Zero Trust Policy

WIX website builder and hosting used by scammers.

Criminals increasingly use free web services to set up their attack infrastructure, exploiting platforms designed for legitimate users. A recent example involves a group utilising the popular website hosting service Wix to create phishing pages. By using trusted cloud storage services and legitimate providers, attackers aim to bypass common security defences, as these platforms are often perceived as safe.
This tactic is frequently part of a larger social engineering campaign, where unsuspecting users are directed to these malicious pages.
Although the harmful sites have been reported to Wix, the incident highlights a critical need for administrators to reassess their assumptions. No website, no matter how benign it appears, should automatically be considered safe. Even trusted platforms can be weaponised by cybercriminals for malicious purposes.

 

 

If in doubt delete. 

Zero Trust Policy