---
title: Bogus invoice delivers malware, mimicks MYOB software
description: Fraudulent invoice scam now circulating, brandjacking popular accounting software MYOB. Sent from a compromised UK MailChimp account, the well formatted email is trying to trick recipients into clicking the ‘View Invoice’ button, that links to a malicious payload.
---

[MailGuard Blog — Breaking alerts, news and updates on cybersecurity topics ](https://www.mailguard.com.au/blog)

# [Bogus invoice delivers malware, mimicks MYOB software](https://www.mailguard.com.au/blog/bogus-invoice-delivers-malware-mimicking-myob-software)

 Written by [Daniel McShanag](https://www.mailguard.com.au/blog/author/daniel-mcshanag) | 24 September 2018 03:14:25 Z

A batch of malicious emails is arriving in inboxes today. They are fraudulent invoices sent from a brandjacked UK based business, and are impersonating the software of MYOB. 

The emails pose a risk to unsuspecting recipients who may be tempted to click out of curiosity. Clicking the 'View Invoice' button provides a link to a malicious payload.  

Adding to the likelihood that some recipients will fall for the scam, the well-formatted fraudulent emails look like a legitimate invoice from a company using MYOB software. 

The emails which claim to be from 'HMS Group Pty Limited' are actually from a compromised MailChimp account, which may belong to a legitimate UK based business.

**How can I protect myself from these types of email scams?**

- Check who it was sent by. Examine the sender or reply-to address and check that it hasn’t been sent from a similar, but recently-registered domain.
- Be alert for strange sentence structure, or phrasing uncommon to the apparent sender.
- Never sidestep formal processes for payments. If in doubt, ring the apparent sender. If they’re not available, wait until they are. A funds transfer is better to arrive later than to be lost without a trace to an overseas cybercriminal.
- Implement scam-proof approvals processes for financial transfers such as two-factor authentication, which requires two employees to sign off on wire transfers
- Education is imperative. Teach staff and employees what fraudulent emails look like. 
- Ensure your email security is up to scratch. A cloud-based, threat detection service such as [MailGuard](https://www.mailguard.com.au/survivingcybercrime_prerelease) will protect your staff in real-time from targeted attacks, without the dangerous time-lag common with signature-based antivirus vendors.

### **Click [here](https://www.mailguard.com.au/survivingcybercrime) to download your free executive guide, *Surviving the Rise of Cybercrime*, by MailGuard CEO and founder Craig McDonald.**

 

*Keep up to date on the latest email scams by [subscribing to MailGuard’s weekly update](https://www.mailguard.com.au/blog-subscriptions), or follow us on Twitter @MailGuard.*

 

[^ Back to Top](https://www.mailguard.com.au/blog/bogus-invoice-delivers-malware-mimicking-myob-software?hs_amp=true#top)

[View full post](https://www.mailguard.com.au/blog/bogus-invoice-delivers-malware-mimicking-myob-software)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Daniel McShanag"
  },
  "dateModified" : "2018-09-24T03:29:25.686Z",
  "datePublished" : "2018-09-24T03:14:25Z",
  "headline" : "Bogus invoice delivers malware, mimicks MYOB software",
  "image" : {
    "@type" : "ImageObject",
    "height" : 500,
    "url" : "https://cdn2.hubspot.net/hubfs/441818/MYOB-240918-01.jpg",
    "width" : 800
  },
  "mainEntityOfPage" : "https://www.mailguard.com.au/blog/bogus-invoice-delivers-malware-mimicking-myob-software",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60.0,
      "url" : "https://cdn2.hubspot.net/hubfs/441818/images/MailGuard_AMP_60x60.png",
      "width" : 60.0
    },
    "name" : "MailGuard Blog"
  }
}
```