Don’t fall for these malware-filled emails impersonating the IRS

Tax season is in full swing, but time is running out if you haven’t submitted them yet. It’s not just regular taxpayers who feel the deadline inching closer. Scammers are also looking to make a quick buck.

Cybercriminals are again impersonating agents from the Internal Revenue Service (IRS), employing all the tricks in their malicious arsenal. In addition, scammers are sending out emails that could infect your device with malware.

Read on to learn how to spot these fake emails and what to do if you receive one.

Here’s the backstory

There are many ways for cybercriminals to steal your details or fool you into handing over information. But one of the most effective methods is through phishing emails.

The latest trend in phishing is by spoofing actual companies or government agencies. If you fall for the scheme, you’ll end up on a fraudulent website designed to infect your device with malware or steal your credentials and/or money.

Security researchers at Cofense noted an alarming increase in the use of the well-known Emotet malware but made some changes to how it operates. Previously, criminals used the W-9 tax document as a delivery method, but the preferred method is impersonating IRS agents this year.

IRS tax scam
Credit: Cofense

Cofense explains that the phishing emails use the IRS logo, explicitly mentioning where you work and attaching a password-protected file. Ignoring all the possible warnings from Microsoft, Emotet malware gets installed on your device if the file is opened and macros enabled.

How to avoid these phishing scams

The most important thing to remember is that the IRS doesn’t initiate contact with taxpayers by email, text messages or social media to request personal or financial information. 

Instead, as noted by the agency, the first contact is generally through a mailed letter delivered by the U.S. Postal Service. If the IRS needs to visit you, it will also send you a letter in advance. Here are ways to avoid falling victim to phishing scams.

Continue reading

Delete your selfies from ID.me - You don't need this to do your taxes

Filing taxes is a chore that most people don’t want to deal with. Unfortunately, there is no way of getting around them. It should be a painless experience, but the Internal Revenue Service (IRS) made things more complex late last year.

Continue reading

The IRS has a new plan to verify taxpayers' identities - Here's how

Late last year, the Internal Revenue Service (IRS) unveiled a plan to verify the identity of taxpayers through a third-party facial recognition company. As you can imagine, the decision wasn’t met kindly by many as privacy concerns were quickly pointed out.

Continue reading

Check the mail for this letter about your final IRS stimulus payment

The global pandemic shows no signs of letting up, with millions of people still struggling from furloughs or price increases. If you need to get tested for COVID-19, here’s where you can find at-home tests that are in stock.

Continue reading

One thing you need to do to protect yourself this tax season

Every year when tax season rolls around, scammers are on high alert searching for their next victim. But as is often the case, by the time you realize that you have been scammed, it’s too late.

Criminals will use every occasion, national event or celebration to target victims. All scams are terrible, but the worst is when fraudsters steal your identity. It can be challenging to prove to authorities that you have been scammed. Tap or click here for details on the worst identity theft scam you’ve never heard of.

Continue reading