1 April 2008 - 16:19Protect Yourself From Spam Attacks This Tax Season

Hackers have been taking advantage of the impending tax deadline in the
United States. A much greater number of spam messages are being used to lure individuals with tax-related themes. Once people click on these fake tax emails, malware is often loaded on to their computer systems.

The security researcher at Symantec, Kelly Conley has reported an increase in new forms of spam related to the impending tax season. Much of the malicious spam convinces unwitting users to download virus-laden files.

One recent attack mimics the American Internal Revenue Service and sends emails that appear to be sent directly from an IRS address. The email advises the receiver that every
US citizen is required to update their computers with new tax-related software to meet new requirements implemented by the IRS. Unsuspecting users are requested to visit irs.gov/softwareupdate and then click open.

When users follow the instructions, they are directed to what they believe is an official IRS page. Unfortunately, the page actually installs a Trojan program on to their system.

The researchers at Symantec have also discovered another recent attack that is meant to convince users that messages are being sent about the TurboTax software to prepare taxes. These spam messages also advise users that they must update their software in order to comply with a newly introduced law. Once again, users end up being directed to a fake Turbo Tax update site where a Trojan is downloaded to their computer.

Symantec researchers advise everyone to be extra cautious when they receive any tax-related email messages during the tax period. The good news is that there is a way you can protect yourself from these tax attacks. You can detect a malicious email by verifying if the message was sent from “turbotax.cn” instead of the legitimate “turbotax.com” domain. You should also check for a suspicious looking URL that leads to the malware download page.

Don’t download anything unless you are completely sure it is legitimate. You should visit the company’s website to update your software, rather than updating it via a link contained in an email message. Also be sure you keep your security software updated.

Taking these simple steps will help you protect your computer and your personal information this tax season.