It's been reported that FogBugz started sending large amount of fraudulent invoices on or about Friday 16th September 2022.
See twitter and HN threads about the issue https://twitter.com/josephruscio/status/1570957688405917698
If you have received fraudulent emails and invoices from FogBugz, there's a very simple first step you can do to help prevent harm to other victims.
* In Firefox, you can open the website https://fogbugz.com/sign-in/ , then open "Help" menu, "Report Deceptive website".
* In any browser, you can open the page to report deceptive websites here https://safebrowsing.google.com/safebrowsing/report_phish/ then fill in the URL https://fogbugz.com/sign-in/
Google and Firefox maintain a list of websites performing active attacks of phishing/fraud/malware/etc. The lists are updated in the background hourly or so for all users of the browsers. A site should be blocked in no time once it's been reported enough time.
It's been very effective at stopping large scale attacks in the wild. That's one of the reasons you see elaborate attacks these days having to circle through many domains, otherwise they get blocked in no time.
There may be more you can do (some comments mentioned writing to your Attorney General and starting class actions lawsuits) however these take a while to initiate and do not stop active harm in the meantime.
Regards.
Hello,
Effective October 5, 2021, if you fulfill customer orders sold on Amazon.co.uk from outside the UK, we request that you offer either Returnless Refund <https://sellercentral-europe.amazon.com/gp/help/G202174940> or provide a Domestic return option for items and orders under £20 (including VAT and shipping charges) as part of our Selling on Amazon Returns policy <https://sellercentral-europe.amazon.com/gp/help/200708210>.
Where you have provided a return address in the UK, we will generate a prepaid return label (see Amazon Prepaid Return Label), <https://sellercentral-europe.amazon.com/gp/help/202072200> which the customer can use to return the items. To set your UK default return address, access the Seller Account Information page, <https://sellercentral-europe.amazon.com/hz/sc/account-information> go to Settings > Account Info > Shipping and Returns Information section, click Return Address, and then provide with the appropriate address.
If you do not provide Amazon with a default return address in the UK for items and orders under £20, Amazon will automatically issue the customer a refund on your behalf where return requests fall within the scope of the Amazon Return policy, <https://www.amazon.co.uk/gp/help/customer/display.html/ref=help_search_1-1?ie=UTF8&nodeId=201819200&qid=1589958582&sr=1-1> without requiring the customer to return the item to you (Returnless Refund).
This change will help to simplify and standardize the returns process for customers and sellers for low-cost items, where international labels are generally more expensive than the cost of the item. If you do not have a UK default return address, our International Returns provider on the Solution Provider Network <https://sellercentral.amazon.com/gspn> may be able to help. The above policy will also apply to Amazon.de, Amazon.fr, Amazon.it, and Amazon.es, for all items and orders under €25 (including VAT and shipping charges).
For more information on returns, go to the help pages below:
• Customer returns for international sales <https://sellercentral-europe.amazon.com/gp/help/G201468550>
• Returnless Refunds <https://sellercentral-europe.amazon.com/gp/help/G202174940>
• Prepaid returns for seller-fulfilled order <https://sellercentral-europe.amazon.com/gp/help/202072200>
Amazon Services Europe