Cybercriminals get creative with tax scams ahead of April 15
Summary
And while the tax-themed email attacks hit businesses in all sectors, we also saw financial firms and construction industries targeted disproportionately," said Sherrod DeGrippo, senior director of threat research and detection at Proofpoint. Troy Gill, manager of security research at AppRiver, wrote a report last month highlighting how cybercriminals were attacking people with phishing emails purporting to contain their W2. Once the cybercriminals have your credentials, Gill said they will then attempt to access the portal and commit any number of crimes, including changing the employees direct deposit information and redirecting funds to themselves. In addition, the attackers could also access personal information about the employee which includes name, D.O.B., physical address, pay stubs, Social Security number, etc," Gill wrote. Threat researchers at Zix-AppRiver released a report last week detailing their efforts monitoring and actively battling a series of Business Email Compromise attacks on CPAs and law firms over the past month.
