Intuit Secure Update – Phishing

The spoofed “Intuit Secure Update” is again making the rounds, attempting to trick users of Quicken, Quickbooks and other Intuit customers into providing sensitive financial information, including usernames and passwords.

The current batch of emails arrive with these headers:

Subject:      Intuit Secure Update
From:     Intuit Company <secure.update@intuit.org>

But, in fact, the actual senders are compromised Yahoo email accounts, for instance:

‘from smtp111.biz.mail.re2.yahoo.com ([66.196.116.96]) by MailFilter1.onlymyemail.com with smtp (Exim 4.67) (envelope-from <secure.update@intuit.org>) id 1O4cAB-0002OL-II for user@domain.com; Wed, 21 Apr 2010 11:48:31 -0400′

The email itself looks like this example below:

Intuit Secure Update - Phishing

Click for Larger Image

The email goes on to warn:

ATTENTION: You will not be able to use our service without update from 26 of April 2010

And provides links to supposedly update your software:

Download :
# Intuit Secure Software for Quickbooks Users
# Intuit Secure Software for Intuit Merchant holders
# Intuit Secure Software for PayCycle customers
# Intuit Secure Software for Quicken users

When in fact each link is to a malicious url-shortening redirect with possible actions including downloading virus and Trojan files and/or prompting the user to provide username/passwords in addition to other sensitive and private information.

There are more details provide on Intuit’s own site at:

http://security.intuit.com/alert.php?a=14

- -

OnlyMyEmail is an award winning hosted spam filtering service and business email hosting provider. Our enterprise cloud computing anti-spam solution, the MX-Defender, has the highest capture rate of any spam filter ever tested in the VBSpam Challenge, blocking a record setting 99.9993% of all malicious and junk email.

Our Personal spam filtering system is also a Software as a Service (SaaS) solution and has won both the PC World "World Class Award" and also the PC Magazine "Editor's Choice Award."

OME-Kids is a webmail solution that protects children from spam and other harmful emails. OME-Kids offers unique Parental Controls that allow you to choose the level of security and oversight that's right for your child.

Related posts:

  1. Bank of America Alert: Secure Your Online Banking Informatiom
  2. AOL’s New AIM Instant Messenger Phishing Scam
  3. Important Account Information – Paypal Phishing Fraud
  4. Facebook Phishing Catches Many
  5. Western Union Phishing Frauds

Tags: , ,

Comments are closed.