Phishing by trello

[Anthony BOUCHONNET]

Hello Support Team,

We've recently experienced a highly concerning phishing incident. Our company exclusively uses Jira (not Trello), but we received an email seemingly from Trello (from the domain @atlassian-bounces.trello.com) that contained a Trojan horse in an attached file.

What's particularly alarming is that the email displayed our director's first and last name, indicating a potential breach of personal information or a targeted social engineering effort.

Several employees clicked on the malicious attachment, but thankfully, our antivirus successfully blocked the Trojan

What solutions can you provide?

[Augusto Lisboa]

Hello! I'd like to ask you to email https://www.atlassian.com/trust/report-abuse about those phishing emails. They'll be able to handle this issue

[Sabin Smith]

I posted on this issue yesterday. My company is being inundated with Trello invite emails and they link to Trello, but when the user signs in, the document contains a malicious URL.

https://community.atlassian.com/forums/Trello-questions/My-company-is-being-inundated-with-Trello-Phishing-messages/qaq-p/3028686

[Hans Polder]

Hi Anthony,

Welcome to the community! That definitely sounds concerning.

As most of us here are users just like you, we don't have access to any Atlassian backend system. I have asked for someone from Atlassian Support to pitch in and provide assistance here.

Thanks,

Hans