Want a fancy knife? You won't get one here.

A high-volume phishing campaign has been identified targeting New Zealand organisations with fraudulent retail lures. The emails impersonate Matsato Knives, a brand frequently associated with high-risk "dropshipping" schemes and deceptive marketing practices. The campaign leverages a sense of exclusivity and extreme urgency, offering significant discounts to entice recipients into clicking malicious links.

Technical analysis reveals that the sender infrastructure originates from the domain hollpack.pro. This domain has zero legitimate association with Matsato Knives or established New Zealand retailers. The use of a .pro top-level domain for a generic retail lure is a typical indicator of disposable attacker infrastructure designed to generate high-volume outreach while evading standard keyword-based filters.

The core objective of this campaign is likely the harvesting of payment card information or the execution of deceptive subscription-based billing. Matsato-branded promotions have a documented history of non-delivery and billing disputes in international jurisdictions. By masquerading as a legitimate retail offer, the attackers exploit the trusted environment of professional communication channels to reach unsuspecting staff members.

Organisations are advised to treat unsolicited high-discount retail offers with high skepticism and to block the hollpack.pro domain at their email gateway. Verification of unknown retail brands should be conducted via independent review platforms before any financial information is disclosed. Clinical Verdict: A coordinated fraudulent retail lure designed for payment harvesting with zero verified link to legitimate New Zealand commercial entities.