Warning – watch out for fake (spam / phishing) emails pretending to be from MYOB
UPDATE: Please scroll down for new comments with important updates. Hi all, We’ve learned that some clients have received emails containing fake invoices that direct people to a website where malware may be installed on their computer. Here's an example of what one of these fake emails looks like. Notethat it was sent from one of the following email addresses or domains: noreply@myob-australia.com noreply@myobaustralia.org noreply@myobnetwork.com noreply@financialaccountant.info noreply@myobemail.com agustin.lopez@pasquel-hermanos.com noreply@app.myob360.com nonreply@apps.myobexpress.com noreply@apps.myob-online.com @skinpired.co.uk @sage-one.net @myobcenter.com account@craftedeals.com.au lionhotelshropshire.co.uk innowood.com enabling.net Or another non myob.com email address They will show a non-MYOB link when you hover over the link Below is a copy of the known fraudulentlinks: hxxp://runrelays.com/invoicelist.php hxxp://url1027.ravnzone.com/link/8214657b6fff8305bec2d77943383aeb hxxp://url0510.bornocare.com/link/ hxxp://ifihadtwolives.com/process hxxps://arednfound.com/invoicelist.php hxxps://hms-group.us11.list-manage.com/track/click?u=68b4cd8940c89334dc9a72421&id=e3514044c9&e=d2cee9eb72 Here's what a real MYOB email looks like.: (Note that it was sent from AccountRight@apps.myob.com and hovering on the link shows that it starts with http://links.apps.myob.com) We strongly recommend not clicking on links in messages that come from strange or unrecognised email addresses. We’d also like to remind people to ensure they have good anti-virus protection installed, make sure their software is up-to-date and they have firewalls in place. We have alerted the relevant authorities about this scam and we are actively working with them to block the websites in question. Here are some tips to protect yourself against fraudulent emails: Only open emails from email addresses that you trust. Legitimate invoices from MYOB small business products will only come from accountright@apps.myob.com or noreply@apps.myob.com Check that any links are valid before clicking on them. Links from genuine MYOB emails to external sites will always start with links.apps.myob.com. Ask yourself if you expected to receive the email. Check it against previous emails from the same company. Does the email address, design and style of writing match what you usually receive? Use common sense. If you’re not sure, use an external method of communication (such as a phone number from the company’s website) to contact the company that sent the email. If you are unsure whether an email message from MYOB is genuine or if you’d like further clarification, you’re welcome to post on the MYOB Community Forum.Warning - Watch out for fake MYOB Support sites
Hi everyone, We’ve been made aware of some of our clients falling prey to a scam, that involves companies impersonating MYOB Technical Support. Client often arrive at these sites through a Google search, and contact them. Once in contact with representatives of these sites, clients are asked to give team viewer access of their workstations to these representatives and later asked to pay a fee for support. To ensure you are in fact on our genuine website, just double check which website domain you are on as on your web browsers address bar as shown below: We recommend Clients to visit https://www.myob.com and navigate from within the portal to get additional information about our products, services and support. Our Technical Support number can be found on: https://myob.com/contactus For all your support needs, we encourage you to use thisForum or our extensiveonline Helparticles. We have a dedicated team of MYOB Support Specialists (MYOB Moderators), and some very generous community members who are always happy to assist with your queries. Here are some examples of fake sites:100,000 registered members!!
1 MIN READ Hi all, 100,000 Registered Members!!! What a fantastic way to kick start 2017!!! Hope you all had a wonderful break and a great start to the new year! I’ve been away from the forum and Australia for the past five weeks. Had to have an extended break due to some unforeseen circumstances. Exciting to come back to this mega milestone!! It is fantastic to see that the community has been busy helping each other during this time. Especially wonderful to see the support that we’ve received from our amazing partners. Thank you to our top contributors of 2016 - ronatbas, TonyLane, Mike_James, DuncanS and gavin12345. A special thank you toronatbas, DuncanS, Julie_A_C, Mike_James and jenniek for being the top contributors in supporting the community during the holiday season. I'd also like to take this opportunity to congratulate Renae Petersen (CloudMindAcc) on earning the Ultimate Partner rank on the forum. A massive thank you from the Social Support team at MYOB for taking the time to share your knowledge and expertise. We love your work, Renae! We have a lot of exciting new product releases and updates planned for you in 2017. I look forward to sharing these with you via this forum. As always please do let me know if you need any help with getting the most out of the community or have any suggestions on how we can further improve the forum. #SimplifySuccess #LoveYourWork Suja Pillai Social Support and Community Manager MYOB Australia Pty Ltd
Enhanced security measures are live - 27/11/24
4 MIN READ Hi everyone, One more update to this post (27/11/24) The changes for inactivity went live today on the 27th November. Specifically for AccountRight, many customers encountered unexpected crashing/freezing of the software after entering their password to sign in again. Work in progress would also be lost due to the crash. I want to assure everyone that this isnot the expected behaviour associated with the inactivity timeout. You can expect the screen to blur and a message pop up. Click sign in again as [user]. Enter your password and you will be back to continue where you were (no loss to work in progress) As a result of the crashing, we have temporarily disabled the inactivity timeout for AccountRight, you will need to close and re-open AccountRight for this change to take effect. Thank you for the feedback, examples and information provided on these issues today. We are continuing to investigate before it is enabled again. I’m updating this post (2:30pm AU 21/11/24), as there have been a lot of comments and engagement in the change. With over 100 comments on the post, we are starting to get the same questions being asked, and answers being missed so I hope to summarise the change and key questions/feedback here. The change/s and timeline September 30 th > MYOB implemented 2FA being required at least once every 24 hours Some initial feedback came through about the 2FA prompt caused customers to lose work in progress MYOB has implemented a fix based on feedback and 2FA is prompted on thefirst login each day to avoid loss of work November 27 th > you'll be asked to sign back in after 20-30 minutes of inactivity (announced November 19 th ) This announcement on inactivity is driving a significant amount of feedback and discussion that I will summarise below What’s changing: FromWednesday 27 November 2024, you’ll be asked to sign back in after 20–30 minutes of inactivity. After this time, your screen will become locked and blurred. To continue working, you'll need to sign back in with your username and password. This applies to the following MYOB software: MYOB Business, MYOB AccountRight and AccountRight browser (online files only), MYOB Connected Ledger, MYOB Business Payroll Only and MYOB Practice. Browser: Desktop: What do you need to do? When you’re presented with theAre you still there?message we recommend that you clickSign in using [existing email]to return to work in progress. Note* 2FA is not required as part of signing in again and your email will automatically be pre-filled Will I lose my work when the screen is greyed out? If you sign back into your account using your existing email, you won’t lose any work in progress and can continue where you left off. However, if you choose to sign in to a different account, your work will not be saved. If you clickBackorReload, or if you don’t sign back in after 12 hours, you'll also lose work in progress. How does the inactivity screen work between Browser and Desktop? When you are logged into both the Browser and Desktop at the same time, each session will operate independently. This means that if you are inactive in the Desktop version, you can remain active in the Browser version. The inactivity timeouts for these sessions are separate from one another. When signing back in after inactivity, do I have to enter my email, password and do 2FA? No, your email will be automatically pre-filled when signing back in using your existing email to both the desktop and browser software. Users will be required to enter their password only. 2FA is still a 24-hour requirement and not required for signing back in after an inactivity timeout. Can I opt out of the new inactivity or 24-hour 2FA security measures? No, as these are mandatory compliance changes in line with industry best practice, they cannot be disabled Why am I being asked to login or do 2FA multiple times a day? Based on scenarios described in the forum + a known issue that MYOB is currently working to resolve, this could be for one of the following reasons. Closing AccountRight using the ‘x’ is currently causing 2FA to be prompted when re-opening the software even if it is less than 24 hours. This was recently discovered as a bug/regression with the last AccountRight 2024.10 release and the team are releasing a fix to this asap.This has been resolved* Opening multiple instances of AccountRight. This seems to something multiple customers are doing when they have multiple files they work on. Instead of switching between files (no login would be required) they are all opened concurrently and each instance of AccountRight that is opened will require a login Is this an MYOB decision or required by the ATO? And subsequently, why do New Zealand customers need to adhere to ATO requirements? Yes, both the 24 hour 2FA and the inactivity timeout changes are mandated requirements from the ATO. This requirement seeks to minimise the opportunity for unauthorised users to access Taxation, Accounting, Payroll, Business Registry or Superannuation related information. Read more on the ATO website here if interested New Zealand customers, although not bound by the same requirements set by the ATO, will share the same security measures as our Australian customers so that MYOB is providing best practice security to all customers. MYOB has also published help articles that explain the changes and can be found below For Australian customershere For New Zealand customershereResolved! Customers unable to access - MYOB Business and AccountRight Browser - 01/03/24
1 MIN READ We have identified an issue impacting customers’ ability to access MYOB Business and AccountRight Browser products. Our teams are urgently investigating this issue and are working hard to resolve it as soon as possible. To receive updates, visit: https://status.myob.com/
