Scam Radar — January 2025
Scam Radar — January 2025
Below are three new scams to keep on your radar, as well as some tips for how to avoid them. Be on the look out for yourself, your family, and your clients! THINK BEFORE YOU CLICK!
Fake Tax Forms, Real Malware
It’s tax season in many countries, and cybercriminals are trying to take advantage of this. In this scam, cybercriminals are targeting Pakistani taxpayers. They are sending phishing emails containing attachments that appear to be official tax documents. The email includes an attachment that appears to be an official tax form from the Pakistani government.
Opening this fake file will install malware on your computer. The malware uses Microsoft Management Console (MSC) files, which can be used to run scheduled tasks on your computer. Because the malware uses scheduled tasks, it can stay active for a long time, even if you reboot your computer. This malware will infect your computer, gather your sensitive information, and steal your data. Your taxes won’t be paid, but the cybercriminals will!
Tips to Avoid Similar Scams:
Avoid downloading attachments from unexpected emails. Only download attachments and documents from sources you trust.
This attack targets Pakistani taxpayers, but remember that cybercriminals can use similar methods to target residents of any country.
Always access and download tax-related forms from official financial or government websites. When in doubt, visit an official tax-related website.
Don’t be Payday Prey
You may have logged in to your online employee benefits portal to access your employment or pay information. However, if you’re unsure how to access it, you may have used Google to find the correct link. In this scam, cybercriminals are trying to take advantage of this by using malicious Google ads, also known as malvertising, that impersonate these portals. When you search for your organization’s employee portal, these ads are among the top results.
If you click on one of the fake ads, they direct you to a fake employee portal login page. When you enter your username and password here, cybercriminals are able to steal them. They can then log in to your real employee portal and replace your banking information with their own. You won’t receive your paycheck on the next payday, but the cybercriminals will!
Tips to Avoid Similar Scams:
Anyone can buy ads on Google, including cybercriminals. Always be cautious when clicking on sponsored ads.
Before you click a link, always hover your mouse over it. Watch out for spelling mistakes and suspicious URLs.
If you’re not sure how to access your employee portal, ask your organization’s human resources department for the correct link.
From Jackpot to Jeopardy
If something seems too good to be true, it usually is, and this scam is no exception. Cybercriminals send you a message on a platform such as WhatsApp, offering you what sounds like an easy job. Supposedly, you will get paid to perform sets of easy tasks, such as liking videos or rating products online. This type of scam is known as a “task scam.”
The cybercriminals will actually pay you in cryptocurrency for completing your tasks during the early part of this scam to try to make this “job” even more convincing. However, you will eventually be asked to send them a large deposit of cryptocurrency so that you can “unlock” your next set of tasks. The cybercriminals claim you will get your money back and that they will pay you an even larger commission. If you send any money, you won’t receive anything in return. Your money will go straight into the cybercriminals’ bank accounts!
Tips to Avoid Similar Scams:
Never respond to unsolicited texts or direct messages about job opportunities. Real employers will not attempt to contact you this way.
A real job opportunity won’t ask you for money to get paid. You should always be suspicious if you are asked to deposit money before you can receive your paycheck.
Trust your instincts. You should always be skeptical of unsolicited job offers, especially if they seem too good to be true!
For more information regarding scams, please visit the Federal Trade Commission (FTC) Consumer Advice website.
You can also find details about the signs of a scam, how to avoid a scam, and how to report a scam in this article by the FTC — How to Avoid a Scam.
Sources:
Cited in article.
Recent Posts
70% shopping rates will make this AEP a war zone. Do you have your Battle Plan ready?
Attend one of our in-person AEP Disruptions Bootcamps, or be left behind.
July 23, 2024
Blue Springs, MO
July 25, 2024
St. Charles, MO
July 31, 2024
Columbia, MO