Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Batman

Mad Scientist
29713 posts

Uber Geek

Trusted
Lifetime subscriber

#233912 9-May-2018 11:03
Send private message

So my closest relation with Xero is that I've heard of them.

Got an email saying bill is overdue, but predated.

Got a link with zero.com but opens in dropbox, phone wants to open with looper.

Thought I'd see if anyone got the same scam?

Create new topic
msukiwi
2412 posts

Uber Geek

Lifetime subscriber

  #2011558 9-May-2018 11:08
Send private message

Yup got the same one!

 

Hopeless to contact Xero!

 

Headers say from xero.com via xtra business mail!


Benjip
941 posts

Ultimate Geek

ID Verified

  #2011559 9-May-2018 11:11
Send private message

When you say "an email saying bill is overdue", is it suggesting that you were billed by Xero themselves? Or is it from a business (but sent via Xero)?

 

If the former, I'd say it's a scam, if the latter then could it be someone you've done business with in the past?

 

Edit: sounds like a scam. See the Xero website for their scam advisories.


msukiwi
2412 posts

Uber Geek

Lifetime subscriber

  #2011562 9-May-2018 11:17
Send private message

Finally found on Xero website:

 

Mar 29th, 2018 – Fake Invoice phishing variant

 

We’ve had reports of people receiving a new version of the fake invoice reminder phishing email, similar to those we reported in February this year.  

 

This time, the sending address of the email is invoice@xero.com with a subject of ‘Your xero invoice available now’.

 

Please be aware that invoice@xero.com is not a sending address used by Xero, and this email was not sent by us.  

 

Here is an example of the email:

 

 

If you have received this email, you should report it as phishing and delete it. Do not click on any links or attachments. The online bill link and PDF attachment in this phishing email will prompt you to download a malicious file, possibly ransomware. You can check the destination URL on a link by hovering your mouse over the link (DON’T CLICK) to see the actual destination URL. This will be displayed at the bottom of your browser window.




Behodar
10413 posts

Uber Geek

Trusted
Lifetime subscriber

  #2011566 9-May-2018 11:20
Send private message

Batman: Got a link with zero.com

 

Does it really say zero.com or is that a typo?


Batman

Mad Scientist
29713 posts

Uber Geek

Trusted
Lifetime subscriber

  #2011572 9-May-2018 11:23
Send private message

It's the exact email shown in previous post.

xpd

xpd
Geek @ Coastguard NZ
13718 posts

Uber Geek

Retired Mod
ID Verified
Trusted
Lifetime subscriber

  #2011682 9-May-2018 13:06
Send private message

Yup got one just now as well......   

 

 





       Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

 

                      LinkTree -   kiwiblast.co.nz - Lego and more

 

       Support Kiwi music!   The People   Black Smoke Trigger   Like A Storm   Devilskin

 

                                            NZ GEEKS Discord______________________________

 

 


CYaBro
4560 posts

Uber Geek

ID Verified
Trusted

  #2012686 9-May-2018 13:44
Send private message

Customer had a different one today.

 

It all looked legit, the link to the Xero invoice did in fact open the invoice on Xero's system, and the PDF was attached to the email as well.

 

Except the invoice was blank except for the companies name and GST number.

 

It was from some health company in Auckland that the customer had never heard of.

 

 





Opinions are my own and not the views of my employer.




Taubin
557 posts

Ultimate Geek

ID Verified
Subscriber

  #2012687 9-May-2018 13:45
Send private message

My wife has been receiving quite a few of these at her workplace. She does a lot of legit work through Xero, and nearly got caught out the first time. She's since started looking at the link when hovering over it to make sure it actually goes to Xero.





ZL2TOY/ZL1DMP


Oblivian
7284 posts

Uber Geek

ID Verified

  #2012699 9-May-2018 14:06
Send private message

Just remember pdfs can drop malware on open via macros...

mattwnz
20096 posts

Uber Geek


  #2023956 28-May-2018 14:03
Send private message

That is why I prefer basic text invoices in the email. But it seems common practice for emails to be sent as PDFs. So I always just view them on the ipad.


Batman

Mad Scientist
29713 posts

Uber Geek

Trusted
Lifetime subscriber

  #2023991 28-May-2018 15:15
Send private message

Got a spark invoice too the other day!


Create new topic





News and reviews »

Bolt Launches in New Zealand
Posted 11-Jun-2025 00:00


Suunto Run Review
Posted 10-Jun-2025 10:44


Freeview Satellite TV Brings HD Viewing to More New Zealanders
Posted 5-Jun-2025 11:50


HP OmniBook Ultra Flip 14-inch Review
Posted 3-Jun-2025 14:40


Flip Phones Are Back as HMD Reimagines an Iconic Style
Posted 30-May-2025 17:06


Hundreds of School Students Receive Laptops Through Spark Partnership With Quadrent's Green Lease
Posted 30-May-2025 16:57


AI Report Reveals Trust Is Key to Unlocking Its Potential in Aotearoa
Posted 30-May-2025 16:55


Galaxy Tab S10 FE Series Brings Intelligent Experiences to the Forefront with Premium, Versatile Design
Posted 30-May-2025 16:14


New OPPO Watch X2 Launches in New Zealand
Posted 29-May-2025 16:08


Synology Premiers a New Lineup of Advanced Data Management Solutions
Posted 29-May-2025 16:04


Dyson Launches Its Slimmest Vaccum Cleaner PencilVac
Posted 29-May-2025 15:50


OPPO Reno13 Pro 5G Review 
Posted 29-May-2025 15:33


Logitech Introduces New G522 Gaming Headset
Posted 21-May-2025 19:01


LG Announces New Ultragear OLED Range for 2025
Posted 20-May-2025 16:35


Sandisk Raises the Bar With WD_BLACK SN8100 NVME SSD
Posted 20-May-2025 16:29









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.







Backblaze unlimited backup