Account Security Alert Scam
Your password is due to expire. The "Security Team" need you to login to your account now.
Check out the email everything might not be as it claims.
E-Mails received:
Date: 27/08/2025, 02:23
From: [Domain name redacted] Authentication info@screenanarchy.com
To: [Name and E-Mail address redacted]
Subject: ***SPAM*** Password Authetication Required 26 Aug 2025
Notes: Sender email address does not seem to align with a security team communication and the click through web addresses: https://dev.gattaka.site/bitrix/admin/mail.html#[E-mail address redacted] does not appear genuine.
Recommendation:
Just delete the e-mail, don't click on any links.
Latest:
Two days later we received an identical email except the expiry date was "28 Aug 2025 GMT". In this case the sender email address was florayuen@viribright.com.hk (a Hong Kong domain name), the click through website address was the same as the previous email.
We also received another email from the same email address as follows.
E-Mails received:
Date: 29/08/2025, 00:28
From: [Email address redacted] florayuen@viribright.com.hk
To: [Name and E-Mail address redacted]
Subject: ***SPAM*** New Sign-in detected for [Email address redacted]
Recommendation:
Just delete the e-mail, don't click on any links.
Further emails received
Date: 10/09/2025, 03:38
From: [Email address redacted] Authentication info@atersource.com
To: [Name and E-Mail address redacted]
Subject: ***SPAM*** Password Authetication Required 9 Sep 2025
Notes: Sender email address: info@atersource.com, atersource.com domain name only registered 9th Sept 2025. Click through domain name: https://zavodmyft.ru/wp-includes/ht.html#[Email address redacted] Russian website.
Recommendation:
Just delete the e-mail, don't click on any links.
Michael Fowler
Other articles by Michael Fowler:
Email Deactivation Alert Scam - Michael Fowler
A deactivation alert for your email account, no time to lose confirm your credentials now, but this is a phishing attempt to gain access to your account... more >>
Companies House Evri Scam - Michael Fowler
Evri is apparently so keen that I review these delivery contents before despatch that they have sent me SEVEN identical emails within hours of each other from different email addresses... more >>
Mail Delivery Incomplete Phishing Scam - Michael Fowler
Well laid out email appearing to be a message from your cPanel telling you of email delivery difficulties. The sender email address has been spoofed to appear to come from your domain name... more >>
