Notice of UnderReported Scareware
Once again this morning we began seeing emails pretending to be from the IRS. The most common spoofing of the IRS comes in the form of phishing sometimes with a little malware to steal your banking credentials peppered in. This one is a little different in both it's approach and its goal, well somewhat.
Today's arrive as an email supposedly from the Internal Revenue Service with the subject line "Notice of Underreported Income".
Inside the email is some random information and a line that reads "Please review your tax statement on Internal Revenue Service (IRS) website (click on the link below):" The link that this line is referring to is somewhat customized in the fact that it incorporates the recipients name in the link as well as some ficticious taxpayer ID number. Once clicked the link takes you to a website made out to look like the IRS site along with the same random info that the email had in addition it contains the the lines"Filing and paying your federal taxes correctly and on time is an important part of living and working in the United States. Please review(download and execute) your tax statement.
Execute my tax statement?! That doesn't even make sense! Regardless, there's the link to download another quasi-customized looking executable file. The file obviously doesn't answer any new tax questions you may have but instead infects your computer with Scareware. I'm sure you're all familiar with scareware, once your computer is infected with this, you will begin to receive pop-up windows alerting you to the fact that your computer is indeed infected, and the only way to clean it up is to purchase their advertised Anti-Virus tool. These will often come with animated windows showing a fake scan taking place with many infections found. The price for these fake AV products is usually around $50 dollars, and in addition to grabbing a quick $50 from you, they also now have your credit card info, but there is a bright side! The pop-ups will usually stop, well at least for a day or two before the whole process starts over.

0 comments:
Post a Comment