We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
80,259 News Articles

Email scammers use IRS threat

Trojan Horse targets victims' PCs

If you get an email telling you that you're under investigation by the US Internal Revenue Service, take a breath before calling your lawyer. It's a scam.

The IRS warned of two fraudulent schemes that use the IRS's name in an attempt to get victims to install malicious Trojan Horse software on their computers.

In the first scam, the email claims to come from the IRS Criminal Investigation division. It says that the victim is under investigation for filing a false tax return. An attachment to the email, which appears to be the IRS's complaint, actually installs malicious software that gives the criminals access to the victim's PC.

The second scam email says a complaint about the victim's "business services" has been brought against them and advises that this can be arbitrated by the IRS.

The "complaint" attachment included in this scam is actually a new type of Trojan Horse called Backdoor.Robofo, according to security vendor Symantec.

Dispute arbitration is something the IRS doesn't do, according to Michelle Lamishaw, an IRS spokeswoman. "We're in the tax business. We're not in the arbitration business," she said.

In fact, any time you get an unexpected email from the IRS, it's almost certainly fake. "The IRS does not send out unsolicited emails," Lamishaw said.

But because these email messages appear to come from the taxman and relate to hot-button topics, some users may click, security researchers warn. "The use of legalese in the message content may intimidate some users into opening the attachment," wrote Symantec researcher Orla Cox, in an entry to the company's Security Response blog.

The IRS became aware of both scams over the past few days, as samples of the email messages were submitted by taxpayers to the [email protected] email address that’s used for reporting scams, Lamishaw said.


IDG UK Sites

Samsung Galaxy S6 release date, features and specs rumours: When will the Galaxy S6 come out?

IDG UK Sites

Why people aren't upgrading to iOS 8: new features are for power users, not the average Joe

IDG UK Sites

Free rocket & space sounds: NASA launches archive of interstellar audio on SoundCloud

IDG UK Sites

iPad Air 2 review: Insanely fast and alarmingly thin. Speed tests, camera tests, beautiful...