- 4chan hell raisers finding fame brings heat?
- The 10 dumbest mistakes network managers make
- NetApp quits bidding war in face of EMC opposition
- CompuServe closes after 30 years
- Google to launch open-source Chrome OS this year
If you get an e-mail telling you that you're under investigation by the U.S. Internal Revenue Service, take a breath before calling your lawyer. It's a scam.
The IRS warned Thursday of two fraudulent schemes that use the IRS's name in an attempt to get victims to install malicious Trojan horse software on their computers.
In the first scam, the e-mail claims to come from the IRS Criminal Investigation division. It says that the victim is under investigation for filing a false tax return. An attachment to the e-mail, which appears to be the IRS's complaint, actually installs malicious software that gives the criminals access to the victim's PC.
The second scam e-mail says a complaint about the victim's "business services" has been brought against them and advises that this can be arbitrated by the IRS.
The "complaint" attachment included in this scam is actually a new type of Trojan horse called Backdoor.Robofo, according to security vendor Symantec.
Dispute arbitration is something the IRS doesn't do, according to Michelle Lamishaw, an IRS spokeswoman. "We're in the tax business. We're not in the arbitration business," she said.
In fact, any time you get an unexpected e-mail from the IRS, it's almost certainly fake. "The IRS does not send out unsolicited e-mails," Lamishaw said.
But because these e-mail messages appear to come from the taxman and relate to hot-button topics, some users may click, security researchers warn. "The use of legalese in the message content may intimidate some users into opening the attachment," wrote Symantec researcher Orla Cox, in a entry to the company's Security Response Weblog, posted Thursday.
The IRS became aware of both scams over the past few days, as samples of the e-mail messages were submitted by taxpayers to the phishing@irs.gov e-mail address that is used for reporting scams, Lamishaw said.
Comments (2)
benficary next kinBy Anonymous on April 12, 2008, 9:40 ami recived a mails that next kin for 39.86 million dollars from us based compain
Reply | Read entire comment
You saved me from clickingBy Anonymous on June 4, 2007, 1:15 pmThis is good to know. I would have clicked on the attachment. Re: E-mail scammers hiding malware in fake IRS notices.
Reply | Read entire comment
View all comments