The Better Business Bureau is warning businesses about a scam in which an e-mail is designed to masquerade as a BBB questionnaire.
The bureau said an e-mail that claimed to be a “BBB SBQ” (standard business questionnaire) was apparently sent to tens of thousands of businesses. The phishing e-mail was sent Friday morning and includes a zip file attachment that links to a site that can download malware on the user’s computer.
The e-mail was sent using the domain “BBBL.org,” which is not a BBB domain name. The domain name was created last October and is registered to an individual in Antwerp, Belgium, according to a news release from the bureau. It’s not clear if the domain owner is directly involved in the phishing scam, but the BBB will be turning over its information to the FBI and Interpol, according to the release.
The BBB offers the following advice when dealing with unsolicited e-mails:
▪ Do not click on links or open attachments in unsolicited email.
▪ If your e-mail program allows it, tag the email as spam.
▪ Report the email to your Internet service provider.
▪ If you are unsure if an e-mail is legitimate, call the sender using a phone number that you know to be correct (not from the e-mail).
▪ More information is available at the bureau’s website bbb.org/scam.