nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Buggy or Phishing invitation to join the Trello Board

Jimmy Nguyen_f3g7sf

Hi Trello support team,

Our organization don't use Trello product, but we got many email with subject "(My name) From (My Company name) invited you to a Trello board 3 days ago". When clicking on the link in the email (trello.com/....), it prompts to join the board. That board was not created by any of us. In the board, there is card with a document inside but not relevant to us.

We guess this is a bug on Trello that allow someone (not from our company) to invite us to their malicious card/document hosted on Trello.

We couldn't raise the private support ticket because we don't use Trello at all. Please contact me for more details. This issue is annoying our organization with daily Trello invitation emails.

Thanks

Accepted answers

Alex W_jr9vvs

Hey @Jimmy Nguyen - welcome to the Community!

I'm sorry to hear you've been targeted by malicious actors through Trello! I've raised a support ticket on your behalf to chat with our team.

You can view this ticket at https://support.atlassian.com/requests/TRELLO-214970/ and you'll be emailed updates.

All comments

Alex W_jr9vvs

Hey @Jimmy Nguyen - welcome to the Community!

I'm sorry to hear you've been targeted by malicious actors through Trello! I've raised a support ticket on your behalf to chat with our team.

You can view this ticket at https://support.atlassian.com/requests/TRELLO-214970/ and you'll be emailed updates.

Anthony BOUCHONNET

Hello, we've just experienced the same problem within our company. We only use Jira, but we received an email from Trello with our director's first and last name, and the file contained a Trojan horse. Some of our employees clicked on it (but it was blocked by our antivirus). What are your recommendations on this subject? For the moment, we have blocked @atlassian-bounces.trello.com

Jelle Pauwels_nak9lc

We have the same issue with our company. What can be done about it?

astewart18

We also have the same issue, invitation sent out to multiple staff claiming to be from director request "Join me to review Appendix A".

Our director does have a Trello account, although he has not used it in months. Do we need to be concerned it might be compromised, or can anybody set up an account with his name?

In future, could these sorts of invitations at least include the email address of the person doing the inviting, to give a little more confidence that it originates from a known person?

Harris HMC - Support Team

We have a similar issue too
What can be done about it?

Ali Ahmed Dar_5xzwz1

Hello Alex, we have also received an email from invitation-do-not-reply@trello.com

I cannot see the request you have mentioned above, but did you guys come up with a solution or work around?