Security firm Trustwave has uncovered a cheeky phishing scam that’s targeting users with emails purporting to come from payroll and finance provider Xero, reports ITnews.
The scam reportedly asks users to download a file to review their invoices, which can result in a zip folder of malicious software being downloaded so that a user’s personal data can be logged.
Trustwave has warned this could be part of a broader campaign to target business customers who use a range of finance software.
Please be cautious when opening any file that looks suspicious.
