We’ve just seen spam that’s supposedly from intuit.com (Quickbooks, etc.) with subjects like “Sales Receipt” or “Purchase Order Receipt” with an attached spreadsheet file.  This is a malware attack designed to trick you into opening the spreadsheet, which will install malware on your computer.  These are not from Intuit – most are from hacked servers in Brazil and Italy.

In nearly all cases, these were blocked or quarantined on spam.his.com, but if you’ve whitelisted intuit.com the spam may have been forwarded to you anyway since you’ve exempted that domain from checking.

If you got one of these, or find one in your spam quarantine, don’t open the attached file, which will have a name like “Sales_Receipt_8602.xls”.

We’re seeing more phishing email aimed at Zimbra accounts.  This example came from a hacked account in Sri Lanka, claiming to be from “Zimbra Webmail Team”:

Your Mail Box Exceeded it storage limit CLICK HERE TO UNBLOCK  or use
the link below Fill and click SUBMIT for more space or you won’t be
able to send/receive Mail.

<bogus link removed ...>

Verify Now
Best Regards,
2019/2020 © Mail Report.

The idea is to trick you into entering your email address and password on the bad guys’ server so they’ll be able to hack your account.

Our Barracuda spam filtering blocks 99%+ of this stuff, but some still gets through.

Be on the alert for suspicious-looking messages.  This one wasn’t well done, but we’ve seen some that were pretty clever, with good formatting, logos, etc.

If you want to check your disk space on a Zimbra account, log on to webmail – you’ll see an indicator in the upper-right corner that shows where you stand in terms of storage allowance.

If you want to change your password on a Zimbra account, log on to webmail and click “Preferences”.

Our multi-layer Barracuda spam/virus/malware filtering is very effective, but some bad things do slip through when the bad guys come up with new tricks and send email before the spam filters get updated.

Here’s an example that came in today, claiming to be from Chase and asking the recipient to correct something about their account.  When viewing the message on a computer you can hover the mouse over any links provided and see if they look real – in this case, doing that showed that the link actually went to a compromised server in Bosnia/Herzegovina:

When in doubt, don’t click on links in email that claim to be from your bank or an online merchant.  Log on to your account manually and decide whether any action needs to be taken.

We are in the process of upgrading our Zimbra mail servers.
The new Zimbra mail server will not support un-encrypted connections.

If you are experiencing issues connection to the new server after the upgrade, see our articles under the Securing Email connections section of our Knowledge Base.

Call our 24/7 Phone Support, they will be happy to help you:
1-301-255-0500
Option #2: Tech. Support,
then Option #1: Email Tech. Support