Is Intuit Insane?
Yes.
Some more color. I use Intuit's assisted payroll service, which is fantastic. You run payroll straight out of QuickBooks and Intuit handles all the tax disbursement and filing for you.
I got an email today with an attachment called securedoc.html claiming to be a message from Intuit. The idea is that you open the attachment and then login to view the message.
It really couldn't look any more like a phishing email, however I called Intuit and remarkably it's a real message. They seriously expect me to open an email attachment and provide account information. The support person at Intuit was able to read the message to me and it was just a routine acknowledgment that some tax rates had been updated.
Intuit is seriously training its customers to fall victim to phishing attacks. The right approach would be to say that a message is available and to log in to your account to retrieve it, or better still to send a message through the existing system in QuickBooks. Securedoc.htm is just begging customers to provide their account information to the bad guys.
Intuit's payroll service stores bank account information, employee Social Security numbers and other data that you really don't want to expose. If you're an Intuit Payroll customer please call and complain. If you've received one of these messages I'd also recommend forwarding it to [email protected], their address for reporting phishing attacks.
Related Posts
- Is it safe to open securedoc.html (Cisco Registered Envelope)?
- Shiti
- Licensing Fail: WinZip vs. ScanToPDF
- Even Shitier - Citibank Remortgage Scam
- Why Microsoft is Likely Doomed Based on one Email Folder
(Published to the Fediverse as: Is Intuit Insane? #etc #spoof #phishing #intuit #quickbooks Intuit is training its customers to fall victim to phishing attacks by sending messages using securedoc.html )
Add Comment
All comments are moderated. Your email address is used to display a Gravatar and optionally for notification of new comments and to sign up for the newsletter.