When Identity Thieves Hack Your Accountant
Summary: A New Jersey CPA identified only as "John" had his computer infected with a Web-based keylogger that recorded every keystroke and periodically uploaded screenshots of his screen, with records going back to mid-March 2018. The stolen data was posted to an unauthenticated site indexed by victim and ordered by day, and the malware appears tied to a cybercriminal using the nickname ja_far who markets a $50 keylogger alongside a crypting service guaranteeing antivirus evasion.
What's compelling: The IRS had already rejected many of John's clients' returns because fraudsters filed them first, yet for at least two weeks he did not appear to suspect his own machine was the source - and those clients may never learn why they were hit.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026