Courier will (not) deliver your parcel

You could receive an email with the subject line "Your Delivery Status", appearing to come from Kakao. It plays on the familiar courier-style delivery update and is designed to get you to open it, click through, or reply to sort out an apparent parcel issue before it is too late.

What makes this one harder to spot is that the sending domain is old, established, and technically checks out as legitimate. Your mail system may treat it as trustworthy because the message passed common verification checks, even though the content is being used for phishing. That means the usual warning signs may be absent, so the real clue is the unexpected delivery prompt and any request that pushes you to act without independently checking it.

The attacker is after engagement first, then whatever follows, usually your login details, business information, or a click that takes you to a fake sign-in page. If you interact with it, you could hand over credentials, expose internal contacts, or open the door to wider compromise of your Microsoft 365 or business email environment.

This activity has already been observed across more than one organisation in the last day, which means it is active rather than theoretical. Treat unsolicited delivery emails cautiously, even when the sender domain looks genuine and the message lands cleanly in your inbox.