Phishing by trello

Question

Hello Support Team, We've recently experienced a highly concerning phishing incident. Our company exclusively uses Jira (not Trello), but we received an email seemingly from Trello (from the domain @atlassian-bounces.trello.com) that contained a Trojan horse in an attached file. What's particularly alarming is that the email displayed our director's first and last name, indicating a potential breach of personal information or a targeted social engineering effort. Several employees clicked on the malicious attachment, but thankfully, our antivirus successfully blocked the Trojan What solutions can you provide?

Augusto Lisboa · Answer

Hello! I'd like to ask you to email https://www.atlassian.com/trust/report-abuse about those phishing emails. They'll be able to handle this issue

Sabin Smith · Answer

I posted on this issue yesterday. My company is being inundated with Trello invite emails and they link to Trello, but when the user signs in, the document contains a malicious URL.

https://community.atlassian.com/forums/Trello-questions/My-company-is-being-inundated-with-Trello-Phishing-messages/qaq-p/3028686

Hans Polder_7ci2ta · Answer

Hi Anthony,

Welcome to the community! That definitely sounds concerning.

As most of us here are users just like you, we don't have access to any Atlassian backend system. I have asked for someone from Atlassian Support to pitch in and provide assistance here.

Thanks,

Hans