Feeds

HMRC fraud warning emails baited by phishers

Spotting scams doesn't have to be taxing

High performance access to file storage

UK taxpayers were targeted by a tax fraud scam mail run late last week.

Fraudulent emails (sample extract below) tried to scare recipients into handing over confidential details to a bogus website in response to supposed allegations that the prospective mark was hiding some of their income.

Tax Type: INCOME TAX Issue: Unreported/Underreported Income (Fraud Application)

Please review your tax statement on HM Revenue and Customs (HMRC) website (click on the link below)

Vulture central spam filters rapped scores of these phishing emails between Thursday and Saturday last week. UK-based net security firm Sophos confirms we were far from alone.

"We're seeing a fair bit of it. 'Unreported/Underreported Income (Fraud Application)' etc," Graham Cluley, senior technology consultant at Sophos told El Reg. "Clicking on the phishing link sends a ref to the site containing your email address - telling them that you have a 'live' address," he added.

Previous HMRC-themed emails have touted fake tax rebates prompting warnings from government tax collectors last October and January, for example. Although the latest run of scam emails play on fear rather than greed, their intent as a means to harvest bank account and other sensitive personal information is very similar to previous attacks.

HMRC's policy is to only contact taxpayers by post.

Britain is by no means unique in spawning tax collector-themed scam emails. In the US, for example, IRS-themed scam emails are commonplace. ®

High performance access to file storage

More from The Register

next story
Obama allows NSA to exploit 0-days: report
If the spooks say they need it, they get it
OpenSSL Heartbleed: Bloody nose for open-source bleeding hearts
Bloke behind the cockup says not enough people are helping crucial crypto project
Web data BLEEDOUT: Users to feel the pain as Heartbleed bug revealed
Vendors and ISPs have work to do updating firmware - if it's possible to fix this
One year on: diplomatic fail as Chinese APT gangs get back to work
Mandiant says past 12 months shows Beijing won't call off its hackers
Call of Duty 'fragged using OpenSSL's Heartbleed exploit'
So it begins ... or maybe not, says one analyst
Heartbleed exploit, inoculation, both released
File under 'this is going to hurt you more than it hurts me'
Bad PUPPY: Undead Windows XP deposits fresh scamware on lawn
Installing random interwebs shiz will bork your zombie box
Experian subsidiary faces MEGA-PROBE for 'selling consumer data to fraudster'
US attorneys general roll up sleeves, snap on gloves
prev story

Whitepapers

Mainstay ROI - Does application security pay?
In this whitepaper learn how you and your enterprise might benefit from better software security.
Five 3D headsets to be won!
We were so impressed by the Durovis Dive headset we’ve asked the company to give some away to Reg readers.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Mobile application security study
Download this report to see the alarming realities regarding the sheer number of applications vulnerable to attack, as well as the most common and easily addressable vulnerability errors.