There is a phishing campaign going on at the moment targeting Orcon Mail user credentials. Some users might receive the following email (that looks obviously fake, so no effort here) from "ORCON SUPPORT <>":


"Your mail-account is among the more than 50,000 subscribers that will be pulled out of our system due to various reasons like inactivity,bulk mailing e.t.c If you still want to continue using mail-account click here ,otherwise your address and its contents will go down permanently.

Thank You,
Mail Team"


Link will lead to Orcon webmail login lookalike site (well they put some effort in recreating the looks), but completely random URL and all plan http.


Overall another sloppy random phishing campaign, but something to be aware of.