Thursday, February 25, 2010

Alert: Quickbooks Scam

We have had a report of an email scam that has been circulating, asking users to download an Intuit certificate that will verify your identity. This email has the Intuit logo/trademark attached and at first glance seems to be legitimate.

This is NOT legitimate.

If you click on the download link provided in the body of the email, it will take you to a webpage where you are prompted to download the “certificate”. This is actually a virus that will install on your system and cause a chain of infections that will render the machine useless.

Please advise all QuickBooks users NOT to download this so called certificate, and have them report any suspicious emails/alerts they may receive.

If you have any questions or concerns please call us at 212-923-CMIT

Below is a portion of the actual scam email:

Valued Customer. 

In order to access Intuit after 1 of March 2010, you shall get a valid Digital Certificate installed on your PC.

Creating and installing your Intuit digital certificate it is a quick and automated process.

Knowing with whom you are communicating, it is a basic principle to the security on internet operations. only encrypt is not enough, as it provides no proof of the identity of the sender of the encrypted information. Without special safeguards, you risk being impersonated online. Digital certificates provide an electronic means for Intuit to verify your identity. Used in conjunction with encryption, digital certificates provide a more complete security solution, assuring the identity of all parties involved in a transaction.

The Intuit server has its own digital certificate to assure you that you are actually calling with Intuit and not with an swindler.

To generate your own Digital Certificate, you need to download Digital Certificate generation tool. For security reasons, download is available only once. Please download Digital Certificate generation tool direct to your Microsoft Windows PC. It is important to note that: Your Intuit digital certificate is not valid after of one year. You will be prompted to enter an automatic renewal process 30 days prior to certificate expiration.

System requirements :
  • Mozilla FireFox 2.0 and above
  • Internet Explorer 6.x, 7.x, 8.x
  • Windows XP, Vista, 2000, 2003, Seven
ATTENTION: You will not be able to use our service without update from 1 of March 2010