Forest Global Training Partners

Cyber Risks · Krebs on Security

Phishers Spoof CEO, Request W2 Forms

Summary: KnowBe4 chief executive Stu Sjouwerman reported that his firm's controller received a spoofed email appearing to come from him, requesting a PDF of all employee W-2 forms for 2015. Analysis of the email headers showed the phishers used a GoDaddy email server and a return address not associated with the company, and the controller and a newly hired CFO questioned the request rather than sending the data.

What's compelling: A W-2 carries an employee's full name, address, wages and Social Security number - everything needed to file a fraudulent tax return - and refund fraudsters stole W-2 data on more than 330,000 people directly from the IRS website the prior year.

Read the original at Krebs on Security ↗

Topics
Fraud & Scams
Related