Spoofed Phishing Emails from *@hosteons.com

Tweet

It has come to our attention that some bad actor is sending out phishing emails or sending out spam using random gmail email addresses, most of the victims are iCloud.com users, the email sent is with subject "MEMBERSHiiP EXPiiRED."

This phishing email is targeted to get credentials of NETFLIX Accounts.

This email goes from a gmail.com email ID but the REPLY-TO email is a hosteons.com email address, so when the victim clicks on reply  those emails comes to us, this is how it came to our knowledge.

But this emails are not being sent from our network, we tried to get the email headers from victims but they won't respond as most of them are not technically sound enough to understand what we are asking and they think that this might be another phishing attempt.

We have already enabled "DKIM/DMARC/SFP" to reduce such email spoofing attempts, but since these emails are not originating from our servers or network there is not much we can do.

BELOW IS SCREENSHOT OF THE EMAIL, THIS IS HOW IT LOOKS: