How the Scam Works:
There are several versions of the email. One claims to be following up on a complaint filed with BBB, the other is asking for updated contact information "as a service to BBB Accredited Businesses." The newest variation falsely claims "One of your customers has submitted a review of your company."
All examples are good fakes - they use correct grammar and follow formats often used by BBB, so they look quite realistic. Both refer the recipient to an online form, and the address appears to be that of a local BBB. However, if you hover your mouse over the web address (the part that begins with http), you can see that the real address is not BBB at all. DO NOT CLICK ON THE LINK! The link actually takes you to a rogue website that downloads a Trojan virus on your computer.
BBB is working with a professional deactivation service to take down the websites that are spreading the malware, and we have reported the incident to the FBI and other law enforcement agencies. Consumers are urged to delete suspicious emails and keep their anti-virus software up-to-date at all times.
Example of the Phishing Email:
You can learn more about these bogus phishing scams and see a screen capture of the scam email at: http://www.bbb.org/us/article/email-phishing-scam-hijacks-bbb-name-again-36089 .
In the future, if you receive an email that appears to come from Better Business Bureau, please check with our local BC office at 604-681-0312 to determine whether it is legitimate. You can find updated information at: www.mbc.bbb.org. You can also forward the email to firstname.lastname@example.org for assistance.
Thank you for your time. We hope this information is helpful and please do not hesitate to contact us if you have any further questions.