Tax Season Ransomware Scam – Watch Out for the Latest Threats
Contents
As tax season nears, cybercriminals intensify ransomware scams, known as “tax season ransomware.” These scams exploit the urgency of tax filings and the sensitive data exchanged. From phishing emails posing as tax documents to fake IRS tools loaded with malware, they target both individuals and businesses. Here’s how to identify these threats and secure your information for a safer tax season.
Top 3 Tax Season Cyber Scams
There are many ways cybercriminals seek to get control of sensitive data that allows them access to your personal accounts. Here are three of the most common scams in circulation this year, but if you have any questions, please reach out to one of our cybersecurity managed services experts to answer any questions.
Phishing Emails
Phishing emails, which trick you into sharing personal information, are increasingly common. This tax season, stay alert for emails posing as official messages from the IRS or well-known tax programs like TurboTax that claim:
- Your account or tax return is restricted or locked
- You must update your tax filing information
- A tax payment was deducted from your account
- You are eligible to receive a refund
Scammers often target HR and payroll departments, posing as Taxpayer Advocacy Panel officials to obtain W-2 information. They use fake emails to gain unauthorized access and exploit sensitive employee data.
Ransomware
Hackers target tax-themed websites, such as those of small accounting firms, to implant ransomware. This malware can seize your data until a ransom is paid. In 2019, ransomware attacks surged by 356%, making this tactic one of the IRS’s top four threats—even beyond tax season.
Phony Internal Revenue Service (IRS) Calls
In 2018, the Justice Department dismantled an IRS phone scam network that defrauded over 15,000 victims out of millions. Scammers posed as IRS officials, seeking personal details like Social Security numbers. The IRS emphasizes on its website that it doesn’t initiate contact with taxpayers via email, text, or social media for personal or financial information and provides resources to help identify legitimate IRS communication methods.
Protect Your Tax Returns from Ransomware
Now that you understand what cybercriminals are up to this tax season, what can you do to protect yourself from getting scammed? Turns out, quite a bit.
- Educate Yourself — and Your Staff
You’ve read this article, so you’re on your way to understanding the depth and breadth of cyberthreats as they relate to tax season.Now go deeper by keeping abreast of the changing tactics used by hackers. The U.S. Department of Homeland Security has a Cyberawareness Division that posts updated educational material.And, don’t keep this information to yourself. Create a cyber awareness training for your business and conduct regular classes to keep employees on their toes. - Use Two-Factor Authentication
Signing into a tax platform like TurboTax? Make sure you use two-factor authentication on all information-sensitive sites.In fact, two-factor authentication is a good idea across all devices — including printers — to prevent unauthorized access of sensitive information. - Keep Software Updated
Hackers use outdated software to install malware on your system. Updating all software, including drivers, strengthens security. A managed print or network provider can automate these updates, boosting protection against data theft. - Have a Disaster Recovery Plan in Place
Engaging cybersecurity experts to assess your infrastructure and build a Disaster Recovery Plan protects mission-critical data. They can implement redundant backups and store data in cloud-based environments, enabling fast restoration if malware or ransomware strikes.
Ransomeware Experts
With over 40 years of providing cybersecurity protection to businesses throughout the Pacific Northwest, Kelley Create has the understanding and expertise to keep your business safe. Don’t let this year’s tax season ransomware cost you, reach out to Kelley Create.
Our team of experts forges long-standing relationships with clients that enable them to more fully understand critical needs. Using the latest knowledge and tools, they can provide your network with the greatest possible level of protection and keep you on the cutting-edge of cybersecurity.
If your business needs state-of-the-art protection from IT security breaches, get in touch with one of Kelley Create consultants today.