Retail NZ hit by email scam - RNZ
Retail NZ has been targeted by scammers who sent fraudulent emails from its membership account on Wednesday, prompting the organization to warn its contacts.
Some people in Retail NZ's contacts list received emails claiming to be from its membership address, stating that a protected document had been shared and asking recipients to click a link to access it. Later that day, the organization confirmed its office accounts had been compromised by the scammers.
IT Response
Retail NZ engaged its IT provider to conduct necessary checks, resulting in the affected account being locked down. The IT provider has assured the organization that no other Retail NZ accounts were compromised during the incident.
We have got our IT provider to run through the necessary checks and they have locked down the affected account. They have advised us that no other Retail NZ accounts have been compromised.
Similar Incidents
Last year, NBR was subject to a similar scam where people received emails claiming to be from journalist Mike McRoberts. The National Cyber Security Centre explained that spoof emails are designed to collect personal information, while business email compromises involve attackers gaining access to an organization's email to target contacts for money or personal details.