Malware attack claims the IRS has rejected your tax appeal

Filed Under: Featured, Malware, Spam

Computer users are finding a message in their email inbox which isn't all that it seems.

The messages appear to come from the IRS, and claim that the recipient's tax refund appeal has been rejected.

Here's a typical message:

IRS spam. Click for larger version

Dear Business owner,
Hereby you are notified that your Income Tax Refund Appeal id#6636527 has been DECLINED. If you believe the IRS did not properly estimate your case due to a misunderstanding of the facts, be prepared to provide additional information. You can obtain the rejection details and re-submit your appeal by using the instructions in the attachment.

Internal Revenue Service

Subject lines used by the emails include:

Rejection of your tax appeal.
Your tax return appeal is declined.
IRS notification of your tax appeal status.

Of course, the attached HTML file is malicious and you should not open it. Sophos detects it as Mal/Iframe-AE.

There's nothing new, of course, about criminals spamming out malicious emails posing as the tax office. But the fact that it keeps happening suggests that it's a very effective method for duping the unwary into infection.

Make sure you keep your anti-virus protection up-to-date and your wits about you.

, ,

One Response to Malware attack claims the IRS has rejected your tax appeal

  1. MikeP says:

    It's easy to spot if you're not a US citizen! I've had this and similar emails but as I live in the UK they get junked PDQ!

Leave a Reply

Your email address will not be published. Required fields are marked *

*

You may use these HTML tags and attributes: <a href="" title="" rel=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <pre> <q cite=""> <strike> <strong>

About the author

Graham Cluley has worked in the computer security industry for more than 20 years, developing anti-virus software and doing quite a lot of talking about internet threats. He's won awards for his blogging, but is proudest of the text adventure games he wrote when he was still wearing short trousers. You can learn more about those (the games, not the trousers) at grahamcluley.com. Send Graham an email, subscribe to his updates on Facebook, follow him on Twitter and App.net, and circle him on Google Plus for regular updates.