ADP Users Hit with Phishing Scam Ahead of Tax Season

Fraudulent emails tell recipients their W-2 forms are ready and prompt them to click malicious links.

Cybercriminals eager to jump-start tax season have launched a phishing campaign targeting some ADP users, telling them their W-2 forms are ready and prompting them to click a malicious link.
Links embedded in the fraudulent email redirect users to a phishing website designed to look like an ADP login page. These domains were registered the same day as the attack, note AppRiver researchers who discovered the campaign. From there, attackers can steal the ADP usernames and passwords of unsuspecting victims who fall into the trap.
With an employees ADP credentials in hand, an attacker can commit any number of malicious activities. They could possibly expose bank account numbers or change their direct deposit information and redirect payments to attacker-controlled accounts, a potentially lucrative tactic if the employer doesnt require two-factor authentication (2FA) for this type of important change.
An attacker could also access a range of personal data including name, birth date, physical address, pay stubs, or Social Security number — all the information theyd need to commit identity theft. They could also locate an employees tax documents, which could be used to file fraudulent tax returns on the workers behalf and redirect the funds to attackers accounts.
As tax season approaches, Troy Gill, manager of security research at AppRiver, advises employees to keep in mind that the IRS will never require you to take action via email. All documentation should be handled with caution: When you receive an alert that tax documents are available, directly navigate to the source instead of following an emailed link. And, of course, enable 2FA whenever possible.
Read more details
here
.
Check out
The Edge
, Dark Readings new section for features, threat data, and in-depth perspectives. Todays top story:
With International Tensions Flaring, Cyber Risk is Heating Up for All Businesses
.

Last News
▸ ArcSight prepares for future at user conference post HP acquisition. ◂ Discovered: 07/01/2025 Category: security	▸ Samsung Epic 4G: First To Use Media Hub ◂ Discovered: 07/01/2025 Category: security	▸ Many third-party software fails security tests ◂ Discovered: 07/01/2025 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
ADP Users Hit with Phishing Scam Ahead of Tax Season