TurboTax Phishing Attack

It's tax season and the bad guys are in full swing. They try to get your Accounting or HR team to send over the W-2s of all employees, but they also target employees in the office and/or at the house. There is a current phishing scam going around you need to warn your employees, friends and family about.

TurboTax is a very popular online tax preparation site, and at the moment the bad guys have massive campaigns going that look like they come from TurboTax. The subject is about "important privacy changes". They want people to click on the link to "opt out" of having their personal information shared, but that's an obvious social engineering trick.

I would send the following to your employees, friends and family.

"At the moment, there is a massive phishing scam that looks like it comes from TurboTax. The email tries to make you click on a link to "opt out" of sharing your personal information with others.

The email is a scam, if you click on the link it will download key logger malware which will steal your identity from your computer or phone.

Remember the following things:

  • Always have your Internet Security software updated, but do not rely on it.
  • Always keep all of your software up to date with the latest patches, computer and phone.
  • Never click on links in emails or text messages unless you are sure it's legit. For instance, if you want to go to TurboTax, visit their website directly by typing their address in your browser.
  • Think Before You Click! Always take a second to ask yourself if this might be a scam."

Source: KnowBe4

Last Updated: August 23, 2016