Forest Global Training Partners

Cyber Risks · Krebs on Security

Crimeware Helps File Fraudulent Tax Returns

Summary: A KrebsOnSecurity investigation found a web-based control panel used by an organized criminal gang to track fraudulent federal tax returns filed on behalf of employees at more than a half-dozen hacked U.S. companies, with thousands of bogus returns totaling more than $1 million. Attackers appear to have stolen the credentials of victim organizations' HR managers to access employee W2 data in UltiPro, the online HR and payroll service run by Weston, Fla.-based Ultimate Software, which said it found no compromise of its own security.

What's compelling: The panel's designers appear to have licensed the tool for resale, and financial industry sources say the same interface has been implicated in scams targeting dozens of companies this tax-filing season - meaning the scheme that hit these victims is available to whoever buys it next.

Read the original at Krebs on Security ↗

Topics
Fraud & Scams
Related