The tax software vendor Intuit warns its QuickBooks customers that they are being targeted in a continuous series of phishing attacks that impersonate the company and try to lure them with fake account suspension warnings.
See also: Hackers target Russian government with phishing attacks
Today's notification comes after Intuit received multiple reports of users receiving these phishing emails and being notified that their QuickBooks accounts were suspended after a failed business intelligence.
“We are writing to inform you that after reviewing your business, we were unable to verify certain information in your account. For this reason, we have placed a temporary hold on account ,” the attackers state in phishing messages while impersonating the QuickBooks support team.
“If you believe we made a mistake, we would like to correct the situation as soon as possible. To help us effectively review your account , please complete the verification form below . Once verification is complete, we will review your account within 24-48 hours.”
Clicking the “Complete Verification” button in the phishing email will likely redirect recipients to a phishing landing site designed to collect their personal information or infect their systems with malware.
See also: Phishing sites use chatbots to steal credentials
The manufacturer of accounting software also added that the sender "is not associated with Intuit, is not an authorized representative of Intuit, nor is the use of Intuit's commercial brands authorized by Intuit».".
How to make sure you haven't fallen victim to phishing
Intuit advises customers who receive one of these phishing emails not to click on embedded links or open attachments.
It also recommends deleting them from your inbox to avoid being infected with malware or being sent to a phishing landing page under the control of the attacker that would attempt to gather the targets' credentials
QuickBooks users who have already opened attachments or clicked on links after receiving one of these phishing emails should:
- Delete all downloaded files immediately.
- Scan their systems using an up‑to‑date anti‑malware solution.
- Change your passwords.
Intuit also provides detailed information on how customers can protect themselves from phishing attempts on its support website.
Earlier this year, in February, Intuit warned QuickBooks customers that they were the target of a phishing campaign that impersonated the company and threatened to delete their accounts.
See also: Spain: Phishing group arrested that emptied bank accounts
In October, threat actors masquerading as Intuit's legal department targeted the company's customers in a fake copyright phishing scam that pushed the malware downloader Hancitor (also known as Chanitor) and Cobalt Strike beacons .
Information source: bleepingcomputer.com
