As if it weren’t already overwhelming enough to gather all the necessary financial statements and fill in the various forms to prepare a tax return, cybercriminals are now making matters worse with a spear phishing scam that has drawn the attention of the U.S. Internal Revenue Service (IRS).

In a statement posted on its website, the IRS said it has learned of taxpayers who have been receiving phony emails that instruct them to visit a portal to update information in order to “e-file” their returns. Though the websites in question may resemble that of the IRS, they are more likely spear phishing scam sites designed to capture personal and professional information.

Email isn’t the only attack vector cybercriminals are using. According to a column in the Washington Post, some taxpayers are also receiving bogus voicemail messages threatening legal action if information is not handed over. Even a lawyer with U.S. Federal Trade Commissioner was among those targeted.

In some respects, it makes sense that spear phishing scams would eventually tie in to something like tax season, which has numerous deadlines to meet and all kinds of details that could easily be missed or overlooked. From a social engineering perspective, there is plenty of reason why unsuspecting citizens might worry they need to update information in order to get their returns processed correctly.

CSO Online recently provided one of the best summaries on how tax-related spear phishing schemes tend to work, with detailed screenshots of the typical email formats used and the kinds of portals designed to steal personal data. Besides the fact that the IRS would not contact taxpayers electronically for these purposes, other telltale signs include messages that don’t specify the recipient by name or email attachments that require a download in order for taxpayers to take the next step.

Forbes had some interesting ideas on how to ensure you’re not fooled by spear phishing scams, including filing tax returns earlier or later than is typical. In any case, anyone who experiences suspicious contact from an organization that purports to be the IRS is being urged to report it using the [email protected] email address.

Besides causing a nuisance, a spear phishing scam like this opens the door to identity theft and possibly worse. Perhaps if cybercriminals begin to make a habit of capitalizing on tax season, taxpayers will become savvy enough to know what to expect and be less likely to fall victim to it. As the old adage says, nothing is certain but death and taxes — cyberthreats notwithstanding.

More from

How Do You Plan to Celebrate National Computer Security Day?

In October 2022, the world marked the 19th Cybersecurity Awareness Month. October might be over, but employers can still talk about awareness of digital threats. We all have another chance before then: National Computer Security Day. The History of National Computer Security Day The origins of National Computer Security Day trace back to 1988 and the Washington, D.C. chapter of the Association for Computing Machinery’s Special Interest Group on Security, Audit and Control. As noted by National Today, those in…

Abuse of Privilege Enabled Long-Term DIB Organization Hack

From November 2021 through January 2022, the Cybersecurity and Infrastructure Security Agency (CISA) responded to an advanced cyberattack on a Defense Industrial Base (DIB) organization’s enterprise network. During that time frame, advanced persistent threat (APT) adversaries used an open-source toolkit called Impacket to breach the environment and further penetrate the organization’s network. Even worse, CISA reported that multiple APT groups may have hacked into the organization’s network. Data breaches such as these are almost always the result of compromised endpoints…

Deploying Security Automation to Your Endpoints

Globally, data is growing at an exponential rate. Due to factors like information explosion and the rising interconnectivity of endpoints, data growth will only become a more pressing issue. This enormous influx of data will invariably affect security teams. Faced with an enormous amount of data to sift through, analysts are feeling the crunch. Subsequently, alert fatigue is already a problem for analysts overwhelmed with security tasks. With the continued shortage of qualified staff, organizations are looking for automation to…

Worms of Wisdom: How WannaCry Shapes Cybersecurity Today

WannaCry wasn't a particularly complex or innovative ransomware attack. What made it unique, however, was its rapid spread. Using the EternalBlue exploit, malware could quickly move from device to device, leveraging a flaw in the Microsoft Windows Server Message Block (SMB) protocol. As a result, when the WannaCry "ransomworm" hit networks in 2017, it expanded to wreak havoc on high-profile systems worldwide. While the discovery of a "kill switch" in the code blunted the spread of the attack and newly…