Buggy or Phishing invitation to join the Trello Board

[Jimmy Nguyen]

Hi Trello support team,

Our organization don't use Trello product, but we got many email with subject "(My name) From (My Company name) invited you to a Trello board 3 days ago". When clicking on the link in the email (trello.com/....), it prompts to join the board. That board was not created by any of us. In the board, there is card with a document inside but not relevant to us. 

We guess this is a bug on Trello that allow someone (not from our company) to invite us to their malicious card/document hosted on Trello.

We couldn't raise the private support ticket because we don't use Trello at all. Please contact me for more details. This issue is annoying our organization with daily Trello invitation emails.

Thanks

[Alex W · Accepted solution]

Hey @Jimmy Nguyen - welcome to the Community!

I'm sorry to hear you've been targeted by malicious actors through Trello! I've raised a support ticket on your behalf to chat with our team. 

You can view this ticket at https://support.atlassian.com/requests/TRELLO-214970/ and you'll be emailed updates. 

[Anthony BOUCHONNET]

Hello, we've just experienced the same problem within our company. We only use Jira, but we received an email from Trello with our director's first and last name, and the file contained a Trojan horse. Some of our employees clicked on it (but it was blocked by our antivirus). What are your recommendations on this subject? For the moment, we have blocked @atlassian-bounces.trello.com

[astewart18]

We also have the same issue, invitation sent out to multiple staff claiming to be from director request "Join me to review Appendix A".

Our director does have a Trello account, although he has not used it in months. Do we need to be concerned it might be compromised, or can anybody set up an account with his name?

In future, could these sorts of invitations at least include the email address of the person doing the inviting, to give a little more confidence that it originates from a known person?

[Jelle Pauwels]

We have the same issue with our company. What can be done about it?