American agricultural dealer wants your Mercury bill paid.

A highly convincing phishing campaign impersonating Mercury has been detected targeting New Zealand organisations.

Technical analysis indicates a surge in New Zealand inboxes receiving messages that claim an "Auto-Payment Unsuccessful" event. The lure pressures users into clicking a link to update their payment details, leading to a credential-harvesting site designed to collect corporate credit card data.

Source: Direct Analysis of Local Phishing Lure

Email authorisation

SPF

none

DKIM

none

DMARC

none

COMPAUTH

fail

Sender Domain Intelligence

What's this?

The domain the message claims to be from. Fresh registrations and known-bad reputations are the strongest technical tells of a spoofed sender.

Sender domainblog.shankslawn.com

Age0 daysNewly registered

Email Sample

Open full size ↗

Source

Internal data