Reports are beginning to increase regarding delivery failure emails showing up in client inboxes for messages they did not send. Within the body of the email is a malicious link, which may appear to be to a company greeting card.
We believe one of two things is happening here.
1) A spammer is spoofing the client’s email address as the sender of a phishing email and as a result the failure notices are coming to the client’s inbox.
or
2) This is a clever phishing email disguised as a delivery failure notice.