The examples I have received are indeed doing that, using a real QB account to send invoices with fraudulent payloads.
-----Original Message----- From: mailop <mailop-boun...@mailop.org> On Behalf Of Faisal Misle via mailop Sent: Monday, February 27, 2023 2:06 PM To: mailop List <mailop@mailop.org> Subject: Re: [mailop] Intuit directly spaming I wonder if its the similar MO as PayPal, where they use Quickbooks accounts to send fake invoices... so it uses the legitimate QB stream On Mon, Feb 27, 2023, at 1:44 PM, MRob via mailop wrote: > I seen scams about norton sometimes sending thru intuit but having > sender who isn't intuit. > > This time, intuit sending direct spam! Can't put intuit IP addr on > blocklist so I hope intuit can fix this. > > Client host is subdomain of notification.intuit.com Sender > bounces+x...@x.notification.intuit.com (this looking like sendgrid > format but no sendgrid in headers) From > quickbo...@notification.intuit.com > Reply-To no-re...@notification.intuit.com Body only have two clickable > links for privacy and TOS link domain is tracking link to > links.notification.intuit.com so it's a phone scam: > > intuit E-commerce Sarvice > > Management Report > For the period ending 26 February 2023 Dear Customer, > > Thank you for choosing our service again! > > Your Subscription with Norton-LifeLock will renew today and $379.99 is > about to be debited from your account by Today. The debited amount > will be reflected within the next 24. In case of any further > clarifications or block the auto-renewal service please reach out to > the customer help centre. > > -------------Product Description:------------------------------ > > Product: Norton-LifeLock Antivirus Security Invoice No: ... > Total Amount: 379.99 USD > Payment Method: Auto Pay > > ---------------------------------------------------------------------- > Notes > Please let us know if you have any issues regarding the payment as > refund can be claimed within 24 hours. Please connect us on +1 (888) > 358-2499 within 1 working days > > Sincerely, > Norton™ 360 Customer Care > +1 (888) 358-2499 > ---------------------------------------------------------------------- > --------------------------------- This email was sent from a > notification only address that cannot accept incoming email. Please do > not reply to this message. > > Sent from QuickBooks Online > © Intuit, Inc. All rights reserved. Privacy | Terms of Service > _______________________________________________ > mailop mailing list > mailop@mailop.org > https://list.mailop.org/listinfo/mailop _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
