--- title: "Amazon Order Confirmation Trojan | DuoCircle" description: "Today we received an email to our Freshdesk support tool that that was an Amazon." image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/blog/email-hosting/amazon-order-confirmation-trojan/" --- Quick Answer An Amazon order confirmation phishing email reached our help desk via Google Apps spam filtering, carrying download links to an infected Microsoft Word document. The lure was a well-crafted shipping confirmation, a reminder that even filtered, well-trained inboxes still see convincing trojan-bearing impersonations. Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Femail-hosting%2Famazon-order-confirmation-trojan%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Amazon%20Order%20Confirmation%20Trojan&url=undefined%2Fblog%2Femail-hosting%2Famazon-order-confirmation-trojan%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Femail-hosting%2Famazon-order-confirmation-trojan%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Femail-hosting%2Famazon-order-confirmation-trojan%2F&title=Amazon%20Order%20Confirmation%20Trojan "Share on Reddit") [ ](mailto:?subject=Amazon%20Order%20Confirmation%20Trojan&body=Check out this article: undefined%2Fblog%2Femail-hosting%2Famazon-order-confirmation-trojan%2F "Share via Email") ![Amazon Order Confirmation Trojan](https://media.mailhop.org/duocircle/images/stock/email-security.jpg) Today we received an email to our Freshdesk support tool that that was an Amazon.com confirmation messages that contained download links to an infected Microsoft Word document. ![](https://media.mailhop.org/duocircle/images/2019/02/amazon-confirmation-trojan.png) In our office message routing configuration, all emails first flow through our Google Apps account to be spam filtered first and then delivered to our help desk software. This is a quick video of me reviewing the message and discussing just how easy it is to be mislead by a very well crafted email messages. ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) Brad Slavin General Manager General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio. ## Secure your email infrastructure Protect, authenticate, and deliver. Contact our team to find the right solution. [Contact Sales](/contact/) [Explore Products](/products/) ## Related Articles [ Email Hosting 18m 10 Steps To Set Up A Self-Hosted Mail Server Without Hitting Spam Mar 10, 2026 ](/blog/email-hosting/10-steps-set-up-self-hosted-mail-server-avoid-spam/)[ Email Hosting 5m The 9 Ways You Benefit from Moving Mail to the Cloud Apr 13, 2016 ](/blog/email-hosting/9-ways-benefit-moving-mail-cloud/)[ Email Hosting 6m Apache Log4j Zero-day Vulnerability: How to Detect it & Precautions You Need to Take Dec 24, 2021 ](/blog/email-hosting/apache-log4j-zero-day-vulnerability-how-to-detect-it-precautions-you-need-to-take/)[ Email Hosting 7m Australian Health Insurance Provider Medibank Suffers Hack, Says 3.9 Million Customer Records Stolen Nov 2, 2022 ](/blog/email-hosting/australian-health-insurance-provider-medibank-suffers-hack-says-3-9-million-customer-records-stolen/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"Amazon Order Confirmation Trojan","description":"Today we received an email to our Freshdesk support tool that that was an Amazon.","url":"https://www.duocircle.com/blog/email-hosting/amazon-order-confirmation-trojan/","datePublished":"2019-02-16T08:37:12.000Z","dateModified":"2019-08-20T14:57:17.000Z","dateCreated":"2019-02-16T08:37:12.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/email-hosting/amazon-order-confirmation-trojan/"},"articleSection":"email-hosting","keywords":"","wordCount":82,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/stock/email-security.jpg","caption":"Amazon Order Confirmation Trojan","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"Email Hosting"},{"@type":"ListItem","position":3,"name":"Amazon Order Confirmation Trojan","item":"https://www.duocircle.com/blog/email-hosting/amazon-order-confirmation-trojan/"}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"Email Hosting","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Amazon Order Confirmation Trojan","item":"https://www.duocircle.com/blog/email-hosting/amazon-order-confirmation-trojan/"}]} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"Amazon Order Confirmation Trojan","description":"Today we received an email to our Freshdesk support tool that that was an Amazon.","url":"https://www.duocircle.com/blog/email-hosting/amazon-order-confirmation-trojan/","datePublished":"2019-02-16T08:37:12.000Z","dateModified":"2019-08-20T14:57:17.000Z","dateCreated":"2019-02-16T08:37:12.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/email-hosting/amazon-order-confirmation-trojan/"},"articleSection":"email-hosting","keywords":"","wordCount":82,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/stock/email-security.jpg","caption":"Amazon Order Confirmation Trojan","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ```