Download the
Tom's Guide App from the AppsStore
News and trends on internet
/ mobile / "sound & picture" / IT
Yes No

IRS Scam: World's Biggest Email Virus Problem

- By - Source : Tom's Guide US

There's no doubt that the tax man can be just as scary as the Grim Reaper. We all felt our bowels drain to our feet when Will Smith's character (Chris Gardner) discovered that the IRS emptied his bank account in The Pursuit of Happyness. Owing the government isn't pretty, and currently scam artists are tapping into that terror in what's now deemed as the "world's biggest e-mail virus problem."

With the subject line reading "Notice of Underreported Income," the message body sparks fear with the following statement: "Please review your tax statement on Internal Revenue Service (IRS) website (click on the link below)." The link of course leads to a fake IRS.GOV website, and according to the IGD News Service, the scam first appeared on September 9. However Gary Warner, director of research in computer forensics with the University of Alabama at Birmingham, warns that the spam campaign is showing no sign of slowing down.

Antispam vendor Cloudmark verifies that statement, adding that more than 11 million messages have been sent to its 2 million desktop customers. Another variant of the scam provides the Zeus Trojan as an attachment rather than a link. Once installed, the Trojan can hack into bank accounts and drain all of the contents. Apparently, victims are falling prey to the scam, losing "millions a day." IGN News reports that businesses are taking a large portion of the heat because banks are holding many of them accountable for their losses.

Paul Ferguson of Trend Micro added that this scam is a huge problem because the Zeus binaries are changing a few times a day to avoid detection, making it hard to stay ahead. But even though antispam can help avoid infection from the attachment, the software can't block users from visiting the malicious websites. "It's definitely a problem," he added.

Share:
21
Comments
X

Comments

mlcloud 09/28/2009 10:30 PM
Hide
-4+

It was only a matter of time before someone intelligently combined what spam does with a virus.

dingumf 09/28/2009 10:32 PM
Hide
--3+

Who's leaking the emails to bank accounts?

dingumf 09/28/2009 10:33 PM
Hide
-11+

mlcloud :
It was only a matter of time before someone intelligently combined what spam does with a virus.



People have already tried it before, but now almost everybody owns a computer, meaning more idiots for the scam.


ssalim 09/28/2009 10:58 PM
Hide
-13+

Hack into bank acc and drain its content... don't banks have security measures to battle this? drain its content to where? Can't the authorities track these?

Hey if you ain't rich, you got nothin' to worry about, lol.

Shadow703793 09/28/2009 11:01 PM
Hide
-7+

FAIL! The EU,etc can shut down the Pirate Bay but they can't shut this down?!?! (It's a bit harder than taking TPB down, but it is possible).

Major7up 09/29/2009 12:27 PM
Hide
-0+

Seems like there is something new to fool people with everyday. You just gotta practice strict/safe browsing habits and make sure people are informed. We also need to teach more people that they should not click on links in emails unless they know for certain of their origins...but even then it can be unsafe. We need a PSA telling people to manually type in URL's rather than clicking links in an email.

Anonymous 09/29/2009 12:39 PM
Hide
-1+

It just takes a little common sense to avoid such a scam. The IRS never sends such notices via email. In fact, I don't recall ever receiving communications of any kind directly from the IRS via email. They don't even ask for your email address on tax forms.

Anonymous 09/29/2009 1:42 AM
Hide
-1+

I've been getting about 4 of these emails per day. I haven't clicked a link once. I think a lot of these attacks could be mitigated by teaching internet users the structure of a web address. The links are always something like: irs.gov.fraudulentclaims.net (not the actual site, just an illustrative example.) I'm sure all you readers already know that in this example the important part of the address is the last part, fraudulentclaims.net. I think it would be simple to educate the public to the fact that addresses are formed as ie: least-significant.more-significant.(...).most-significant.(net/org/edu/etc.) I used to work in a bank and we received a decent amount of training in avoiding these types of attacks but this fact was never mentioned. This method has never failed me in detecting such an attack and it's very simple to understand.

LePhuronn 09/29/2009 1:59 AM
Show
nurgletheunclean 09/29/2009 5:49 AM
Hide
-4+

LePhuronn :
I'm sorry but if you're stupid enough to click a link from an obviously bogus e-mail you deserve to get fucked over.



Tell that to your mom.

croc 09/29/2009 6:06 AM
Hide
-6+

I got one of these emails a few months ago. After I got up off of the floor from laughing, I added the sender to my spam list. Aussies don't deal with the IRS, and our ATO is much more taxpayer friendly from what I have heard...

one-shot 09/29/2009 7:06 AM
Hide
-7+

I feel left out..I don't have any in my inbox. :(

anamaniac 09/29/2009 8:00 AM
Hide
-1+

Now, why in the name of hell would a government whistleblower agency contact me by e-mail?
I'd think the IRS would either do it by phone or in person...

Congratulations on being gullable to all the suckers they just owned.

Anonymous 09/29/2009 11:14 AM
Hide
-2+

I think they would come to your house before sending an e-mail, they have enough money to single you out and put you in Prison... so why would they bother with e-mail? Sporting that new car they get every so many years is much cooler!

virtualban 09/29/2009 11:15 AM
Hide
-0+

And, even if they were to contact people by e-mail, people need open the irs page themselves, just like any bank or whatever. Just don't trust any link sent by mail.

r0x0r 09/29/2009 2:13 PM
Hide
-3+

one-shot :
I feel left out..I don't have any in my inbox.



Easy. Just visit the friendly website that promise to make you rich (you can tell it's not a scam 'cos the address ends in .ru) and give them your email address :)

Regulas 09/29/2009 3:33 PM
Hide
-0+

Never got it but I use G-mail and it seems to have a very good spam filter. Best I have seen. For a while I would look through my spams to make sure Google was not filtering out something I wanted but it has done great.
Another reason I like Linux on my laptop too. I do not think this Virus targets Linux.

eyemaster 09/29/2009 6:49 PM
Hide
-2+

With just a bit of resources that I'm not willing to fork over, it's very easy to track down who's stealing this money. The gov simply doesn't care enough to be bothered. It's too much hassle for them to try and negotiate with other countries to go and find those thieves.

How hard is it to track money transactions through banks? How hard is it to stake out a Money Mart or whatever type of money transfer store and wait for the perps to show up and pick up the money?

Manos 09/29/2009 10:59 PM
Hide
-0+

LePhuronn :
I'm sorry but if you're stupid enough to click a link from an obviously bogus e-mail you deserve to get fucked over.



Dont be a dumbass. Not all adult users are familiar with scams of the kind and I consider it normal for some to be worried enough and go for i due to decency issue they have and get screwed over out of concern. I wouldn' and a lot of others wouldn't but some did and would.

Holly crap though.. millions already? o.O

virtualban 09/29/2009 11:26 PM
Hide
-0+

All this international stealing of bank money... It kinda reminds me of Sony's ex-commercial, also known as:
"YOU CAN'T BELIEVE EVERYTHING YOU HEAR ON THE INTERNET OR I'LL BE A NIGERIAN MILLIONAIRE BY NOW"