With the end of tax season approaching, identity thieves are using clever techniques in an attempt to steal your sensitive information. The latest scam comes in a form of an email pretending to be from TurboTax. TurboTax users are claiming they are receiving fake emails with the title "TurboTax State Return Rejected." This is an example of a phishing attack. The email includes an infected .zip file and recommends that you open the file so that you can identify the issues with your tax return. However, if you open the attachment, the malicious code is executed and can infect your computer with malware.
Once installed, the malware may use keystrokes and loggers to monitor your surfing actions. A keylogger records your keystrokes and sends the information to a remote attacker. The identity thief can use this information to gain access to your bank accounts, email, etc.
This link contains an image copy of the fake TurboTax email. If you receive this email, you should perform the following steps:
- Do not open the attachment.
- Delete the email.
- Ensure you have an updated antivirus application.
- Keep up with operating system updates.
- Don't click on suspicious hyperlinks.
- Use an updated web browser with anti-phishing security features.
By following these simple steps, you can help prevent scammers from stealing your personal information.
Images ŠTurboTax, Intuit