MailGuard has detected a new fake invoice scam brandjacking MYOB.
This message is designed to look like a legitimate invoice delivery email. It has MYOB branding on it, and a ‘view invoice’ button.
The message purports to be from ‘ESIB Pty Ltd,’ displaying the sender address ‘ account[at]esib[dot]com[dot]au’
The email subject field shows ‘Invoice INVV02703 from ESIB Pty Ltd.’
As can be seen in the screenshot above, this hoax email is quite well written and formatted. But if the recipient were to click on the ‘view invoice’ button they would be directed to download a .zip file containing JavaScript malware.
It’s never a good idea to open email attachment files in .zip format, especially if they come from unfamiliar senders. Scammers employ email scams like this to deliver JavaScript malware payloads like ransomware, spyware and viruses.
Fake MYOB invoice emails are a commonly used scam format. MYOB is a very popular platform, so their brand is a valuable asset for cybercriminals who want to gain the trust of their intended victims.
Protect Against Scams
If your company is using an integrated productivity platform like MYOB, then you know the benefits of cloud-based technology. Doing business online opens up opportunities for collaboration on an unprecedented level, but with that opportunity comes significant risk.
Cybercriminals routinely use the familiar brandnames of trusted products like MYOB to deceive victims and deliver malware to their computers.
All criminals need to break into your business is a cleverly worded email; if they can trick one person in your company into clicking on a malicious link they can gain access to your data.
For a few dollars per staff member per month, you can protect your business with MailGuard's cloud-based email and web filtering security.
Talk to an expert at MailGuard today about making your company's network secure: 1300 30 44 30
Stay up-to-date with new posts on the MailGuard Blog by subscribing to free updates. Click on the button below:
