Email security services providing firm MX Lab recently confirmed the existence of a new Trojan distribution campaign via email titled "Intuit Security Warning", amid a host of others. Surprisingly, the campaign was hidden inside a message that comes from the world largest bookkeeping software Quickbooks Accounting Software Intuit . The security firm found that emails had come from the spoofed addresses: |
"QuickBooks Online email@example.com", "QuickBooks firstname.lastname@example.org", “Intuit Security Center email@example.com".
Following is an expert from the content of the email: "We will update the browsers supported by us as on 5th November, 2015. Hence, we urge you to upgrade to the recent version to get the best online experience. Please click on the following link, download and finally install the security update for all the supported browsers to align yourself with INTUIT online security."
The security firm recommends you not to follow the above text followed by a URL. In case, you go for the URL, it is possible it will open a new browser and will update the browser page. It is also reported that 2 out of 55 AV engines perceived Trojan at Virus Total as HEUR?QVM03.0.Malware.Gen or Trojan.A19773F50. "On 18th November, 2015, we posted a warning on security.intuit.com informing our customers about the threat of this particular phishing campaign, which has been detected by us, capable of delivering a malicious payload. We have also asked all the main email providers to block this email and then remove it from their systems. Moreover, due to our actions, the suspected URL (intuit.updates.securityserver-2.com) was deleted from Internet, resulted in blocking of the threat to Intuit clients," says Steve Sharpe, Spokesman of Intuit as reported in news published by SCMagazine.com.
It is not the first time that Intuit products have been targeted by cybercriminals. The incidents had happened in February this year and Intuit had to shut down its TurboTax state e-filing system for the short term because hackers used the same system to file false returns and steal tax returns. Hence, consumers need to be careful about outwardly random emails that demand strange requests, like dodgy emails offering gifts.
Related Articles -
quickbooks intuit software, intuit quickbooks help, quickbooks customer support, quickbooks phone help,