Craig McDonald (@CraigEMcDonald) header
Craig McDonald (@CraigEMcDonald) profile picture

CEO & founder @MailGuard. #Cybersecurity expert. Passionate about cloud & email security. Author: Surviving the Rise of Cybercrime (free download below)

Australia
Joined March 2010
Photo by Craig McDonald (@CraigEMcDonald)Photo by Craig McDonald (@CraigEMcDonald)Photo by Craig McDonald (@CraigEMcDonald)Photo by Craig McDonald (@CraigEMcDonald)Photo by Craig McDonald (@CraigEMcDonald)Photo by Craig McDonald (@CraigEMcDonald)Photo by Craig McDonald (@CraigEMcDonald)Photo by Craig McDonald (@CraigEMcDonald)Photo by Craig McDonald (@CraigEMcDonald)Photo by Craig McDonald (@CraigEMcDonald)
Your credit card gets “limited.” Payments stop. Subscriptions fail. Someone in finance drops everything to fix it. That urgency is what attackers are counting on. We’re seeing a new Amex scam that plays directly into this pressure. Read about it here: mailguard.com.au/blog/americ…
23
A refund dispute lands in your inbox. It looks routine, feels operational. Someone in finance clicks, reviews it, and tries to resolve it. This is what we’re seeing in a new QuickBooks phishing campaign targeting businesses right now. Read more here: mailguard.com.au/blog/quickb…
14
A $2.90 delivery fee doesn’t feel like a cyber risk, it feels routine, but that’s exactly why it works. We’re intercepting a new Australia Post phishing campaign designed to look like a standard shipping update. Get the breakdown here: mailguard.com.au/blog/austra…
11
We’re intercepting a new scam that’s impersonating Anthropic, using Claude branding to push users into entering credit card details. It feels legitimate because it mirrors the tools people are already using every day. Get the breakdown here: mailguard.com.au/blog/anthro…
26
Tell your teams to be careful about Spotify payment notifications. We’re blocking a new phishing campaign impersonating Spotify, that takes users through a multi-step process, login, payment details, then personal information. Get a full breakdown here: mailguard.com.au/blog/spotif…
22
A small payment request can feel routine, alerting your team to a shipment delay. A customs fee to be sorted and a quick approval to keep things moving. We’re seeing this play out in a current campaign impersonating DHL right now. Here's a breakdown: mailguard.com.au/blog/dhl-em…
19
A message from Medicare shouldn’t be a risk, but that’s what attackers are exploiting. A simple email with a routine prompt to “check your inbox.” We're stopping a Medicare impersonation campaign doing exactly this, to steal your myGov info. Read more: mailguard.com.au/blog/medica…
13
This latest phishing campaign impersonates CMC Markets, using a “Regulatory Security Notice” to create urgency and trust, then quietly capturing user login credentials through a fake site. Here’s a breakdown of how this particular scam works: mailguard.com.au/blog/cmc-in…
23
A healthcare admin’s email account was compromised and used to send a PDF to partners & patients of the medical specialist group she represents. The PDF link leads to a fake Microsoft login page designed to steal user's MS365 credentials. Read more 👇 mailguard.com.au/blog/compro…
22
Most cyber attacks start with something that looks routine. Like a training document, policy update, or a “learning path” someone needs to complete before a deadline. That’s what a new phishing campaign we’re stopping is exploiting. Read about it here: mailguard.com.au/blog/fake-l…
18
A Spotify-themed scam email places the login and payment details of team members in jeopardy. MailGuard’s AI threat engines have intercepted the emails that present a fake login, account suspension, and credit card capture page. Read more here: mailguard.com.au/blog/spotif…
31
A toll notice shouldn’t become a security incident, but that’s what we’re seeing. An “Overdue Final Toll Invoice” email, branded as Linkt with an urgent tone, a familiar format and delivered as one large image with a button to pay now. Read more: mailguard.com.au/blog/linkt-…
27
A government logo lowers your guard, especially with a household name like Medicare. That’s exactly why attackers use it. A new “Important reminder” email impersonating Medicare, is luring recipients to a fake myGov sign-in page. Read more here: mailguard.com.au/blog/medica…
1
1
21
Warn your team to take care with AusPost delivery notifications. MailGuard’s AI-powered threat engines are stopping an Australia Post phishing campaign using a simple “Parcel Awaiting Instructions” email to steal your credentials. Read more here: mailguard.com.au/blog/austra…
21
Tell your teams to be alert for a ‘renewal scam’ impersonating ‘CrazyDomains’. It warns of a service interruption and lands when teams are busy & distracted, capturing credit card details, SMS codes, and even PINs. Read more here: mailguard.com.au/blog/crazy-…
38
Alert your teams to this latest EnergyAustralia refund scam, because most phishing doesn’t look dangerous anymore, it looks helpful. We’ve published a short breakdown of why it’s effective & what leaders should be paying attention to. Read it here: mailguard.com.au/blog/energy…
13