Scammers are taking an aggressive, social-engineering approach to tax season this year.
Tax season has arrived – and so have the scammers. Unfortunately, crooks either prey on people’s sense of fairness and willingness to comply with authority, or appeal to a taxpayer’s fear of paying late or not complying with the law.
Patrick Wheeler, director of threat intelligence, for Proofpoint, says social engineering is increasingly common and very effective, plus fraudsters are packing attachments and links with banking Trojans and fairly new strains of ransomware.
“In the past, the tax lures were laggards,” Wheeler says. “But not this year. They’ve been adopting more of the phishing trends and tactics that we see all year ‘round.”
Carl Leonard, principal security analyst at Forcepoint, says scammers also use various phishing scams to collect a victim’s personal financial information.
“The scams range from a letter from the IRS promising a $7.5 million refund, to a promise from Her Majesty’s Revenue and Customs in the UK that says people can pay their taxes in the form of iTunes vouchers.”
While it can get silly, the results can be serious. Proofpoint’s Wheeler says most of these scams were discovered in February and will be active through the end of tax season.
For more information, check out the research reports from Proofpoint and Forcepoint. The nine slides are based on research from both reports.
Organizations that receive a phishing email scam involving the IRS or a W-2 form should forward it to [email protected] and place “W2 Scam” in the subject line. Organizations that fall victim to these scams should also file a complaint with the FBI’s Internet Crime Complaint Center (IC3).
About the Author(s)
You May Also Like
Guarding the Cloud: Top 5 Cloud Security Hacks and How You Can Avoid Them
April 4, 2024Cybersecurity Strategies for Small and Med Sized Businesses
April 11, 2024Defending Against Today's Threat Landscape with MDR
April 18, 2024Securing Code in the Age of AI
April 24, 2024
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024Black Hat Asia - April 16-19 - Learn More
April 16, 2024