Hum Posted December 1, 2005 Share Posted December 1, 2005 CNN) -- A British Internet-security firm is warning people to not get hooked by an e-mail scam promising tax refunds from the U.S. Internal Revenue Service.The e-mails, known as a "phishing" scam in technology speak, exploit a loophole allegedly built into the real IRS Web site, according to the firm, but instead of getting money back from the government, those biting on the scam could be giving away the contents of their bank accounts. The messages, which started earlier this week, say that the recipient has only 12 days to claim a $572 tax refund and that the necessary forms can be accessed on the IRS Web site. It slyly states that refunds are often overlooked for a variety of reasons and encourages people to access the forms immediately. Phishing scams have been around for years and their success usually hinges on the perceived legitimacy of the e-mails, which often include official logos and language. Typically, they ask for personal information like Social Security or bank account numbers. Making the scam even more effective is that the address appears legitimate -- an extension of the www.govbenefits.gov site -- but the site is bogus. It appears real because the phishers have found a flaw in the design of the IRS Web site, one that allows them to "bounce" people to the fake site, according to Sophos, a company that tracks malicious Internet programs. The fake Web site has been taken down, but it easily could be resurrected at any time, said Graham Cluley, a Sophos senior technology consultant. http://www.cnn.com/2005/TECH/internet/11/3....irs/index.html Link to comment Share on other sites More sharing options...
Recommended Posts