Overview
Recently, we received a report regarding a very high-risk phishing attempt. The attacker masqueraded as Deloitte IT support and included a malicious phishing link in the email, which attempts to harvest Deloitte user credentials.
Details of the Email
Below is the email content. Indications that it is not authentic are as follows:
• The “From:” address is not a Deloitte email address.
@deloitte.com.sg email addresses have not been used as a primary email address since the formation of Deloitte Southeast Asia.
• All legitimate Deloitte email addresses end with @deloitte.com
• If you hover your mouse over “Re-activate” or “Click Here” tabs you will find it does not send you to a Deloitte website.
Action Required
If you receive a similar email, please do not click any attached link or submit your user credentials.
Please click here for instructions to report the email as spam, which will help to limit the number of people who receive this email, thereby reducing our exposure to the malicious email.
Please click here to review the spam mail management guide that will help you to block the malicious email address.