Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Endpoint //

Authentication

2/19/2019
11:35 AM
Steve Zurier
Steve Zurier
Slideshows
Connect Directly
Twitter
RSS
E-Mail

6 Tax Season Tips for Security Pros

Here are some practical ways to keep your company safe as Uncle Sam comes calling.
2 of 7

1. Beware of Tax-Related Business Email Compromises
Business email compromises (BEC) are becoming increasly savvy, Masergy's Watson says. An example of a BEC during tax season would be a payroll administrator receiving an email supposedly from the CEO or a top official at the company asking to be sent all of the company's W2s or 1099s. Teach your payroll people to look out for common phishing scams. Today, the fraudsters especially like to use copycat domains or defunct domains that look real but aren't.
Michael Blache, CISO at TaxSlayer, advises companies to make it as difficult as possible for people to obtain company tax information. For example, if a person claims to be looking for an old W2, require that person to physically go to the payroll administrator's office. If somebody calls by phone, have that person send the last four digits of his Social Security number as well as a copy of a valid driver's license. Make it difficult for the fraudsters, and they will move on.
(Image: momius - Adobe Stock)

1. Beware of Tax-Related Business Email Compromises

Business email compromises (BEC) are becoming increasly savvy, Masergy's Watson says. An example of a BEC during tax season would be a payroll administrator receiving an email supposedly from the CEO or a top official at the company asking to be sent all of the company's W2s or 1099s. Teach your payroll people to look out for common phishing scams. Today, the fraudsters especially like to use copycat domains or defunct domains that look real but aren't.

Michael Blache, CISO at TaxSlayer, advises companies to make it as difficult as possible for people to obtain company tax information. For example, if a person claims to be looking for an old W2, require that person to physically go to the payroll administrator's office. If somebody calls by phone, have that person send the last four digits of his Social Security number as well as a copy of a valid driver's license. Make it difficult for the fraudsters, and they will move on.

(Image: momius Adobe Stock)

2 of 7
Comment  | 
Print  | 
Comments
Threaded  |  Newest First  |  Oldest First
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
2/23/2019 | 11:05:27 PM
Copycats
> fraudsters especially like to use copycat domains or defunct domains that look real but aren't.

This isn't limited to tax schemes. In the Anthem hack a few years back, central to that was the creation by hackers of copycat domain we11point[dot-com] instead of wellpoint[dot-com].
REISEN1955
50%
50%
REISEN1955,
User Rank: Ninja
2/25/2019 | 3:38:52 PM
Re: Copycats
Just received a spam email for reference F-ACEBOOK - easy to spot for the trained observer. 
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
2/25/2019 | 8:50:45 PM
Re: Copycats
@REISEN: The funny thing is that these are the cleverer attackers!

Most of the time, they don't even bother -- and the email address and domain name look like something created by a password manager's PRNG engine.
COVID-19: Latest Security News & Commentary
Dark Reading Staff 4/10/2020
Zscaler to Buy Cloudneeti
Dark Reading Staff 4/9/2020
Researcher Hijacks iOS, macOS Camera with Three Safari Zero-Days
Kelly Sheridan, Staff Editor, Dark Reading,  4/3/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: Yes, I do have virus protection on my system, now what?
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
New Best Practices for Secure App Development
New Best Practices for Secure App Development
The transition from DevOps to SecDevOps is combining with the move toward cloud computing to create new challenges - and new opportunities - for the information security team. Download this report, to learn about the new best practices for secure application development.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-11669
PUBLISHED: 2020-04-10
An issue was discovered in the Linux kernel before 5.2 on the powerpc platform. arch/powerpc/kernel/idle_book3s.S does not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR, aka CID-53a712bae5dd.
CVE-2020-1801
PUBLISHED: 2020-04-10
There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does not sufficiently validate the caller's identity in certain share scenario, successful exploit could cause information disclosure. Affected product versions include:Mate 30 Pro vers...
CVE-2020-3952
PUBLISHED: 2020-04-10
Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls.
CVE-2020-4362
PUBLISHED: 2020-04-10
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation vulnerability when using token-based authentication in an admin request over the SOAP connector. IBM X-Force ID: 178929.
CVE-2020-1802
PUBLISHED: 2020-04-10
There is an insufficient integrity validation vulnerability in several products. The device does not sufficiently validate the integrity of certain file in certain loading processes, successful exploit could allow the attacker to load a crafted file to the device through USB.Affected product version...