The Scamdex Scam Email Archive - Phishing, ID Theft

Subject:  sign-in Alert
From:  "Zimbra" <ahaque@osais.com>
Date:  Mon, 22 Feb 2016 17:27:41 -0800

A Scam Email with the Subject "sign-in Alert" was received in one of Scamdex's honeypot email accounts on Mon, 22 Feb 2016 17:27:41 -0800 and has been classified as a Phishing, ID Theft Scam. The sender was "Zimbra" <ahaque@osais.com>, although it may have been spoofed.

Dear Zimbra User,

This is to inform you that someone else was trying to log into your Zimbra account from a different location {IP:27.167.158.432 CHINA : 22/02/2016 by 03:10 PM GTM}

If this is not you kindly click below to sign in to update and verify your account for you have only 12 hours to do this in order to keep your Zimbra account active.

Click Here to verify your Account.

This Email is Subject to mandatory follow, Failure to comply would lead to Permanent closure of Account.

Regards,
Technical support team