The IRS reports an increase in reports of phishing emails asking for W-2 information.
The IRS Online Fraud Detection & Prevention Center (OFDP), which monitors for IRS-related phishing attacks, said it has detected an increase in compromised emails, starting in January 2017. It says cybercriminals are aiming for mass data theft in addition to targeting individual taxpayers.
Their most common tactic is impersonating an executive with a compromised email, which is sent to a human resource professional within the same business to request W-2 information. OFDP officials say this is one of several new variations of phishing campaigns targeting W-2 data, an sign of criminals' growing interest in sensitive tax information.
Businesses are urged to limit the number of employees who handle wire transfers, adopt multifactor authentication to verify requests for W-2 information, and use verbal confirmation for data change requests. Those hit with these attacks should report data loss to the IRS, state tax agencies, and the FBI's Internet Crime Complaint Center. Suspected phishing emails should also be reported to the IRS.
Read more details here.
About the Author(s)
You May Also Like
Guarding the Cloud: Top 5 Cloud Security Hacks and How You Can Avoid Them
April 4, 2024Cybersecurity Strategies for Small and Med Sized Businesses
April 11, 2024Defending Against Today's Threat Landscape with MDR
April 18, 2024Securing Code in the Age of AI
April 24, 2024
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024Black Hat Asia - April 16-19 - Learn More
April 16, 2024