It’s tax season, so be careful around your email inbox. Hackers are busy spamming users with all kinds of tax-related scams, including claims the IRS is ready to hand over a million-dollar refund.
Spoiler: It's not. Cybersecurity and anti-phishing provider Trustwave compiled a list of the most common tax scams it’s seen this year. They include emails impersonating the IRS that offer “the stunning amount of $16.5 million in approved funds if the target gives the information required.”
The email asks the user for their name, address, phone number, and valid ID details—all information a scammer could use to commit identity theft. However, the message is loaded with grammar and spelling mistakes and originates from a Gmail address.
Still, Trustwave notes the offer of the $16 million may be enough to fool less-tech savvy users in desperate need of cash. “This message preys on the recipient's desire for financial gain by hoping that they will ignore the warning signs, which include the email being very poorly worded, and give away their sensitive data,” the company wrote in a blog post(Opens in a new window) on Thursday.
Trustwave also spotted hackers trying to spread malware through emails that claim to contain a user’s W-2 tax form. An attached Word document is designed to trick an unsuspecting victim into downloading malware capable of secretly stealing passwords from a browser.
Trustwave’s warning arrives as other cybersecurity companies are also flagging tax-related scams. Last week, Malwarebytes discovered(Opens in a new window) a malware campaign also impersonating the IRS to send fake W-9 tax forms to users. In reality, the attached W-9 form is rigged to download the Emotet malware, which can install numerous
Read more on pcmag.com