9 Phishing Lures that Could Hijack your 2017 Tax Refund
Scammers are taking an aggressive, social-engineering approach to tax season this year.
Tax season has arrived – and so have the scammers. Unfortunately, crooks either prey on people’s sense of fairness and willingness to comply with authority, or appeal to a taxpayer’s fear of paying late or not complying with the law.
Patrick Wheeler, director of threat intelligence, for Proofpoint, says social engineering is increasingly common and very effective, plus fraudsters are packing attachments and links with banking Trojans and fairly new strains of ransomware.
“In the past, the tax lures were laggards,” Wheeler says. “But not this year. They’ve been adopting more of the phishing trends and tactics that we see all year ‘round.”
Carl Leonard, principal security analyst at Forcepoint, says scammers also use various phishing scams to collect a victim’s personal financial information.
“The scams range from a letter from the IRS promising a $7.5 million refund, to a promise from Her Majesty’s Revenue and Customs in the UK that says people can pay their taxes in the form of iTunes vouchers.”
While it can get silly, the results can be serious. Proofpoint’s Wheeler says most of these scams were discovered in February and will be active through the end of tax season.
For more information, check out the research reports from Proofpoint and Forcepoint. The nine slides are based on research from both reports.
Organizations that receive a phishing email scam involving the IRS or a W-2 form should forward it to [email protected] and place “W2 Scam” in the subject line. Organizations that fall victim to these scams should also file a complaint with the FBI’s Internet Crime Complaint Center (IC3).
About the Author
You May Also Like
Unleashing AI to Assess Cyber Security Risk
Nov 12, 2024Securing Tomorrow, Today: How to Navigate Zero Trust
Nov 13, 2024The State of Attack Surface Management (ASM), Featuring Forrester
Nov 15, 2024Applying the Principle of Least Privilege to the Cloud
Nov 18, 2024The Right Way to Use Artificial Intelligence and Machine Learning in Incident Response
Nov 20, 2024