Another phishing attack has been launched this morning, not only using the Intuit brand, but also now by spoofing various intuit email addresses, which are listed below, as the originating email address. The subject lines and content are the same as used in the attack last week.

• security@intuit.com
• software@intuit.com
• anti-fraud@intuit.com
• admin@intuit.com)

However, this time there is a malicious payload (malware) that will be downloaded if the recipient clicks on a provided link. Please advise anyone receiving these emails to send all spoofed/phishing emails received to spoof@intuit.com, and if they think that they've downloaded the malicious file(s), then to run anti-virus and/or to seek professional assistance to ensure that their computer(s) are not infected.

We are working with our site shutdown service to remove access to any pages associated with links in these phishing emails.

Here's a link to security.intuit.com where we posted an alert about the issue:

Customers have reported receiving spam. Below is a copy of the fake email.

Hello,

In our continuing effort to guarantee that correct information is being sustained on our systems, and to be able to grant you better quality of service; INTUIT INC. has participated in the Internal Revenue Service [IRS] Name and TIN Matching Program.

We have found out, that your name and/or Employer Identification Number, that we have on your account is different from the information provided by the SSA.

In order to review the information on your account, please enter the site.

Best regards,

INTUIT INC.

Corporate Headquarters

2632 Marine Way

Mountain View, CA 94043

This is the end of the fake email.

Visit security.intuit.com to get the most up to date information about phishing.

We provide you with the following information:

• Steps to take now
• What you can do to protect yourself from a phishing attack
• The 3 common methods that phishers use in their emails

 Forward suspicious emails to spoof@intuit.com.