Experts warn about sophisticated Telstra email scam targeting Aussie customers

Security experts are warning of a sophisticated email scam targeting Telstra customers across the country.

The email-based cyber-attack uses Telstra branding to trick customers into clicking a link that can infect their computer with a malicious file used to steal information.

The email gives the appearance of being sent from Telstra and claims to have a document for customers to review and sign.

It was first uncovered by MailGuard - a cloud web and email security service specialising in the detection and blocking of email threats.

“It claims that a user from a Telstra Business Centre branch is the sender of the document, with their name used in multiple locations including the message body,” explained MailGuard in a statement.

To add legitimacy to the scam, the email also includes DocuSign branding to further convince users to click on links.

“The inclusion of both Telstra and DocuSign logos and branding within the email makes it harder for recipients to identify the email as a scam as it appears as a legitimate notification,” explained MailGuard.

“In such cases, users are reminded of the importance of not accepting/clicking on documents from unknown senders, despite the organisation they purport to be from. All attachments/links should only be accessed when users are certain about the credibility of their owners.”

Telstra offers information on its website warning customers of such scams, with the telco telling customers to be wary of “badly written emails with broken sentences”, “unaddressed or generically addressed emails” and “suspicious looking URLs”.

If a customer suspects they have been sent a scam email, Telstra advises to immediately delete it from their inbox. Customers can also submit the information to Telstra who will investigate the report.

WHAT YOU CAN DO TO AVOID SCAMS

- Don't reply or open links found in a suspicious email until you are sure they are legitimate - you can always phone the organisation to double check it's official.

- If you do click the link and are taken to a login page, take an extra moment to stop and consider what you’re handing over.

- Report the scam to the organisation and Scamwatch.