According to the Better Business Bureau Northwest, there’s a new email phishing scam targeting users of QuickBooks accounting software:
Victims receive an email in their inbox with the subject line, “QuickBooks Support: Change Request.” The email claims to be a confirmation from Intuit that a business has changed its name and contains a hyperlink that the recipient can click on to cancel the request. However, if email recipients click on the link, it directs them to a site that downloads malware to their device… the malware allows criminals to capture passwords and other personal information from a device.
Some good tips from the BBB Scam Alert statement —
- Check the reply email address. One easy way to spot an email scam is to look at the reply email. The address should be on a company domain, such as firstname.lastname@example.org.
- Check the destination of links: Hover over links to see where they lead. Be sure the link points to the correct domain (www.companyname.com) not a variation, such as companyname.othersite.com or almostcompanyname.com. Scammers can get creative, so look closely.
- Consider how the organization normally contacts you. If an organization normally reaches you by mail, be suspicious if you suddenly start receiving emails or text messages without ever opting in to the new communications.
- Be cautious of generic emails. Scammers try to cast a wide net by including little or no specific information in their fake emails. Be especially wary of messages you have not subscribed to or companies you have never done business with in the past.
- Don’t believe what you see. Just because an email looks real, doesn’t mean it is. Scammers can fake anything from a company logo to the “Sent” email address.
Source: Accounting Today — Better Business Bureau warns of QuickBooks phishing scam