topic Re: Suspected phishing/scam ? in Installation & Licensing Forum

Suspected phishing/scam ?

anusingh12 — Tue, 12 Sep 2023 10:10:49 GMT

received this email from Autodesk employee

Kind Attention , xxxxxx

Dear Sir - To Whomsoever it may concern.

Myself XXXXXX and I am part of the License & Compliance group (Software Asset Management program) for Autodesk India Private Ltd. Our team help people / customer to manage software in a better and avoid risk of counterfeit and legal issue and helped customer to manage Autodesk software in better way- As per the licensing terms & condition.

I believe you must be aware that - Autodesk is a world leader in 3D design, engineering and entertainment software and owns the copyright to, amongst other software titles, AutoCAD, Revit , 3ds Max and Maya.

We would like to inform you that the purpose of sending this email is to inform you that xxxxxxxxx. has installed and is using various versions of Autodesk software Version (full) at your business premises. Please note that by virtue of this usage your organization is governed by the License and Service Agreement (herein after referred to as the “Agreement”) that accompanies each unit of the software and is mandated to be adhered to. The deployment of legal licenses is in violation to our Autodesk License & Service Agreement (LSA). Users are using the un-entitled / un-authorized version of software’s – which is not legally entitled to your organization and against the Licensing agreement terms. , The usage of our Autodesk Software Programs which is over & above the legal licenses of your organization. As per the current license entitlement and current usages – there is a huge back and disconnect and same needs to resolve within immediate effect.

xxxxxxx. - has been selected to undergo a Software Audit to evaluate the usage of Autodesk software and compliance with the relevant License Agreements. This written notification marks the official start of Autodesk’s audit engagement with xxxxxxxxx Customers often ask whether they may uninstall or remove Autodesk software after receiving Autodesk’s written audit notification. However, such actions are not consistent with our customers’ legal agreement to fully cooperate with the Autodesk software audit.

From this point forward, therefore, we kindly ask you to refrain from deleting or removing any Autodesk software currently installed on xxxxxxxxx. Computers until the audit process is complete. We would also add that until the present audit engagement is finalized, any new procurement of Autodesk software by xxxxxxxxx. will not be relevant in case the audit shows compliance issues that call for resolution.

As part of license & Compliance engagement , our Authorized auditor team & myself will work on our behalf to explain you on current licensing issue & concern areas in detail . We request xxxxxxx. to take this matter on your highest priority and Should appoint a concern person to work with us. Authorized auditor team & myself will contact you shortly to discuss on the same and take the engagement ahead towards its logical conclusion.

Please acknowledge receipt of this notification by return of email xxxxxxx@autodesk.com

If you are not the right contact for this audit, please refer me internally.

Please feel free to call or email us anytime, for any clarification and query

Re: Suspected phishing/scam ?

Anonymous — Tue, 12 Sep 2023 12:17:39 GMT

why would you think that?

its coming from an autodesk.com email address

so you need to do what they are asking

Re: Suspected phishing/scam ?

anusingh12 — Tue, 12 Sep 2023 12:57:11 GMT

now a email I recently received from an attorney's office, followed by a subsequent phone call. Interestingly, the lady who spoke with me on the phone is the same individual who previously attempted to sell Autodesk software is from authorized reseller. She now represents the attorney's office.

WITHOUT PREJUDICE
KIND ATTENTION- xxxxx,

Thank you for your time over the phone today.

Despite our multiple conversations, your good self advised us for the Audit at your premises .Wherein ,our client has full rights to visit and check the deployment of their softwares.

Using nonvalid software is an act of copyright infringement, which may result in both civil and criminal penalties. Further, Autodesk's Terms of Use requires all customers to use Autodesk software in compliance with all applicable laws and further prohibits any act of unauthorized use, access or reproduction.

We have requested you to close this amicably multiple times but the same has not been done at your end. The only other option now left is an onsite audit.

Please also note that as per terms and conditions of the EULA Autodesk have all legal rights to check its IP deployment status at your organization through Onsite Audit/Remote Audit as per LSA (License Service Agreement) under 9.7 Audit clause. Review can be proposed by Autodesk and accordingly would suggest making arrangements for this onsite review.

Looking forward to your support to avoid any further escalation.

Re: Suspected phishing/scam ?

pendean — Wed, 13 Sep 2023 13:32:31 GMT

@ anusingh12 sadly this is not the venue to resolve your licensing matter. I'm not sure what you are hoping to find out except what you've shared with us here is inline with what Autodesk does in situations like yours.

Engage with your company's legal counsel and accountant to resolve the matter.

Here is a case study worth reading https://scottandscottllp.com/autodesk-audits-how-did-autodesk-know-to-audit-you-and-what-to-do-now/

Re: Suspected phishing/scam ?

pkimmons — Thu, 21 Sep 2023 19:18:06 GMT

Why? 3 of the times we received a 'Microsoft Audit' from a Microsoft email address, they were scams. Microsoft provides a path by which you can check if an entity is a legit source. Autodesk provides nothing of the sort, in fact, just puts up more red flags by which to suspect them not being legit.

Anyone that works in Aerospace and Defense knows that the top red flags for social engineering are:

1. Forced time line: Convincing the other person that 'if they don't do this fast they will get in big fat trouble'. According to Autodesk's own Terms and Conditions, the worst that can happen is arbitration determining if Autodesk has grounds to terminate the subscription and that's not a quick time line.

2. Intimidation and Bullying: Scaring the other party into doing said task, is another large red flag of social engineering.

3. Originally, there was not a good way to authenticate the SAMTool download, and over the course of the last couple of months, this has been clarified/fixed. Originally, the email received would have an encrypted link (from a Barracuda Firewall, that has an active exploit currently) or the offer of 'downloading from OneDrive. Red Flag #3.

Someone on the forums here also put a link to the tool that Firefox refused to load. Red flag #4.

Googling / Linked in searches of the people claiming to be from Autodesk resulted in suspect results. The only person that could be authenticated in the communications from our audit was the actual lawyer. Red flag #5.

For all of the people here saying: just do it, I would kindly suggest to sharpen up your social engineering skills and for Autodesk adjust their practices accordingly if they want better feedback/less pushback:

https://www.knowbe4.com/

https://www.amazon.com/Ghost-in-Wires-audiobook/dp/B005HBO3BY/ref=sr_1_1?crid=31A5JDMT373AT&keywords=ghost+in+the+wires&qid=1695323445&sprefix=ghost+in+the+wires%2Caps%2C121&sr=8-1

https://www.amazon.com/Art-Deception-Controlling-Element-Security/dp/076454280X/ref=sr_1_2_sspa?crid=31A5JDMT373AT&keywords=ghost+in+the+wires&qid=1695323445&sprefix=ghost+in+the+wires%2Caps%2C121&sr=8-2-spons&sp_csd=d2lkZ2V0TmFtZT1zcF9hdGY&psc=1

While I'm on this rant/topic, the tool doesn't even identify the difference between the Read Only version of Inventor (which is the only way to view Inventor drawings) and the full version that is under subscription. It will be interesting to see the results of what we have submitted.

I highly suggest getting the lawyers involved first.