Cyber Risks · Krebs on Security

IRS Scam: Phishing by Fax

Summary: A phishing campaign that began in the last 24 hours spoofs irs@irsonline.gov and warns recipients of discrepancies on their 2010 tax return, instructing them to print, fill out, and fax an attached PDF form to a toll-free number, (866) 513-7982, within 24 hours. The bogus form requests the Social Security number, e-File PIN, and adjusted gross income, and the 866 number was returning a fast-busy signal at the time of writing.

What you should know: The data the fake form collects - SSN, e-File PIN, and adjusted gross income - is exactly what the IRS uses to authenticate taxpayers, so a single faxed page hands over the credentials needed to impersonate the filer.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related