Email invoice scam on the rise

MBIE is warning of a sophisticated fake invoice scam  attacking small businesses. Emails from an attacker pretending to be a recognised supplier contain fake invoices and attempt to trick the business into paying the invoiced amount into the attacker’s account. The invoices look legitimate because the attackers have previously attacked an employee’s email account. In organisations such as franchises, where many people may share similar email addresses or platforms, one weak password can leave you vulnerable. CERT NZ recommends four measures to help keep franchisors and franchisees safe.