Cyberattackers Abuse QuickBooks Cloud Service in 'Double-Spear' Campaign

Malicious invoices coming from the accounting software’s legitimate domain are used to harvest phone numbers and carry out fraudulent credit-card transactions.