Feeds

HMRC fraud warning emails baited by phishers

Spotting scams doesn't have to be taxing

Choosing a cloud hosting partner with confidence

UK taxpayers were targeted by a tax fraud scam mail run late last week.

Fraudulent emails (sample extract below) tried to scare recipients into handing over confidential details to a bogus website in response to supposed allegations that the prospective mark was hiding some of their income.

Tax Type: INCOME TAX Issue: Unreported/Underreported Income (Fraud Application)

Please review your tax statement on HM Revenue and Customs (HMRC) website (click on the link below)

Vulture central spam filters rapped scores of these phishing emails between Thursday and Saturday last week. UK-based net security firm Sophos confirms we were far from alone.

"We're seeing a fair bit of it. 'Unreported/Underreported Income (Fraud Application)' etc," Graham Cluley, senior technology consultant at Sophos told El Reg. "Clicking on the phishing link sends a ref to the site containing your email address - telling them that you have a 'live' address," he added.

Previous HMRC-themed emails have touted fake tax rebates prompting warnings from government tax collectors last October and January, for example. Although the latest run of scam emails play on fear rather than greed, their intent as a means to harvest bank account and other sensitive personal information is very similar to previous attacks.

HMRC's policy is to only contact taxpayers by post.

Britain is by no means unique in spawning tax collector-themed scam emails. In the US, for example, IRS-themed scam emails are commonplace. ®

Beginner's guide to SSL certificates

More from The Register

next story
NASTY SSL 3.0 vuln to be revealed soon – sources (Update: It's POODLE)
So nasty no one's even whispering until patch is out
Russian hackers exploit 'Sandworm' bug 'to spy on NATO, EU PCs'
Fix imminent from Microsoft for Vista, Server 2008, other stuff
US government fines Intel's Wind River over crypto exports
New emphasis on encryption as a weapon?
To Russia With Love: Snowden's pole-dancer girlfriend is living with him in Moscow
While the NSA is tapping your PC, he's tapping ... nevermind
Forget passwords, let's use SELFIES, says Obama's cyber tsar
Michael Daniel wants to kill passwords dead
Slap for SnapChat web app in SNAP mishap: '200,000' snaps sapped
This is what happens if you hand your username and password to a 3rd-party
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Win a year’s supply of chocolate
There is no techie angle to this competition so we're not going to pretend there is, but everyone loves chocolate so who cares.
Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.