Hackers Abuse Quickbooks to Send Phone Scam Emails: INKY

INKY researchers have disclosed the firm’s findings on the latest variant of the tried-and-true phone scam, a low-tech phone scam where hackers extract personal information by sending out spoofed emails from what appears to be a legitimate source, with no suspicious links or malware attachments, just a pitch and a phone number. 

This time around, hackers impersonate reputable retail brands such as Amazon, Apple, and Paypal, to send out legitimate notifications from QuickBooks, an accounting software package used primarily by small business and midmarket customers who lack in-house expertise in finance and accounting. The notifications presented an invoice and a contact phone number to dispute the charge. Calling this number allowed hackers to extract financial information.

Seeing as this sort of scam can be dangerous as I’ve illustrated here, reading this report which can be found here is very important in my mind. The full report can be read here.

Leave a Reply