Users of QuickBooks, an accounting software package developed by Intuit, were warned late last week of an ongoing phishing campaign that is impersonating Intuit with fraudulent renewal charge emails. A sample of the fraudulent email, provided by BleepingComputer, revealed the sender email address “billing@support-intuit[.]com” along with the subject “Intuit QuickBooks Desktop Annual Payment Plan Pending” and a convincing email body that stated the user’s account status was expired. Intuit advised all receivers of phishing emails relating to their products to not click on the links embedded in the emails as well as open any attachments. This is not the first phishing campaign related to the QuickBooks software this year, as Intuit customers were also warned of a different, still-active, campaign in July 2021 that related to a QuickBooks upgrade. The emails prompted the recipients to call a phone number in order to upgrade their software by the end of the month and emphasized that the users’ databases and backup files would be corrupted and removed if the software was not upgraded. BleepingComputer identified phishing emails of the same nature being sent out throughout October as well with the same end-of-month deadline. CTAPT analysts will continue to monitor all phishing campaigns relating to Intuit and provide insight into future campaigns as they arise.