nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

What is this email: [Confluence] HAOBAO shared “Product requirements” with you

Dave_ksqq58

Just received an email out of the blue from: HAOBAO (Confluence) <confluence@ecosystem.atlassian.net>

I can't find a reference to HAOBAO at Atlassian, and googling the name points to the HaoBao North Korean Bitcoin-Stealing Phishing Campaign

This has all the markings of a phishing attack - has Atlassian suffered a security breach?

2025-01-10 13_23_18-Clipboard.png

"HaoBao" – North Korean Bitcoin-Stealing Phishing Campaign

Accepted answers

All comments

Robert DaSilva_a432as

Hi @Dave , welcome to the Community!

As far as I can tell, ecosystem.atlassian.net is a real site, and holds data related to various Atlassian products.

I would assume that maybe someone intended to share that page with another users, and mistyped your email address. You can safely ignore the email, and delete it.

Cheers,

Robert

Robert DaSilva_a432as

In this instance, "HAOBAO" is the display name for a user on that site. This could be someone's first or last name, or a nickname they go by.

Dave_ksqq58

Hopefully that's what it is, though the 'mistyping my address' theory seems like a stretch.

The recent Google Forms exploit - Forms was exploited to send e-mails from a legitimate google.com address - leaves me in doubt, as an attacker who could generate an e-mail that legit comes from confluence@ecosystem.atlassian.net could use it to fool a lot of users.

Dane Low_b9zwty

Had the same email just sent to me. I would absolutely treat this as a phishing attempt.

Paul Ceronio_kpmx1s

Good morning all,

I got this email too. Funny that Atlassian corporate customers are targeted this extensively.

Atlassian should look into it. Maybe there was a leak or they got hacked?

Best regards,

Paul

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence

cloud

confluence-cloud

security

issue-security