Scammers exploit trust in Atlassian Jira to target organizations

Threat actors have leveraged legitimate email notification feature of Atlassian Jira to deliver localized scam emails at scale. The emails From late December 2025 through late January 2026, victims were targeted with spam emails from legitimate-looking Atlassian Jira Cloud addresses. Organizations already using Jira were specifically targeted: the attackers selected domains known to have active Jira instances, which means recipients would be used to receiving Jira notifications. The subject lines contained promises of gifts and … More →

The post Scammers exploit trust in Atlassian Jira to target organizations appeared first on Help Net Security.