We highlight current cyber security threats in New Zealand, and provide guidance on what to do if they affect you.
CERT NZ has received an increase in reports of unauthorised email access from businesses. Scammers access a business’s email accounts and send false invoices to the company’s clients and potentially other people as well.
A staff member’s email address is logged into by an unknown, unauthorised person. The scammer looks through the account to find out what a real invoice from that company looks like, and sends out false invoices, often to clients that exist in the company’s email address book. The invoices look real, but the banking details on the invoice are different.
In some of the reports to CERT NZ, the recipients have tried to verify the invoice via email. In these cases the scammers have responded to them using the email account they have accessed, reassuring them that the invoice is legitimate. The recipient has then paid the scammers.
The reports that CERT NZ have received have all used Gmail as their mail provider, though this scam could also affect other email providers. CERT NZ has not been able to confirm how the unauthorised access has taken place, though it is possible that it is through weak or leaked passwords.
If you’ve been affected by this scam, or require further support, submit a report on our website or contact us on 0800 CERT NZ.