Scam Emails Imitating Intuit QuickBooks Caught – MX Lab
Scmagazine.com reported on 2nd December, 2015, stating that security firm MX Lab recently has found a new Trojan distribution campaign via email, which is concealed inside a message coming from Intuit QuickBooks, titled as "Intuit Security Warning", amongst a host of others.
MX Lab observes that this email has come from the spoofed addresses alike "QuickBooks security@quickbooks.intuit.com", "QuickBooks Online security@intuit.com", or "Intuit Security Center qbsecuritycenter@intuit.com".
The content of the email reads something like this: "We will update the browsers supported by us as on 5th November, 2015. Hence, we urge you to upgrade to the recent version to get the best online experience. Please click on the following link, download and finally install the security update for all the supported browsers to align yourself with INTUIT online security."
It is not recommended to follow the above text by a URL. But, if it is followed, then it will open the browser and update the browser page or the plug in Adobe Flash, depending on the browser being used by you.
While writing, 2 out of 55 AV engines detected Trojan at Virus Total as HEUR?QVM03.0.Malware.Gen or Trojan.A19773F50.
SCMagazine.com published news on 2nd December, 2015, quoting Steve Sharpe, Spokesman of Intuit, as saying: "On 18th November, 2015, we posted a warning on security.intuit.com informing our customers about the threat of this particular phishing campaign, which has been detected by us, capable of delivering a malicious payload. We have also asked all the main email providers to block this email and then remove it from their systems. Moreover, due to our actions, the suspected URL (intuit(dot)updates(dot)securityserver-2(dot)com) was deleted from Internet, resulted in blocking of the threat to Intuit clients."
This is not the first time that cybercriminals have targeted Intuit products. During February 2015, Intuit had to shut down its TurboTax state e-filing system temporarily because hackers were using the system to file false returns and steal tax returns.
Therefore, consumers must be careful about seemingly random emails which make strange requests. Whenever you receive such dodgy emails offering gifts, you should first visit the official website of the product in question and seek support.
» SPAMfighter News - 12/14/2015
