ADP Users Hit with Phishing Scam Ahead of Tax Season

  /     /     /  
Publicated : 23/11/2024   Category : security


ADP Users Hit with Phishing Scam Ahead of Tax Season


Fraudulent emails tell recipients their W-2 forms are ready and prompt them to click malicious links.



Cybercriminals eager to jump-start tax season have launched a phishing campaign targeting some ADP users, telling them their W-2 forms are ready and prompting them to click a malicious link.
Links embedded in the fraudulent email redirect users to a phishing website designed to look like an ADP login page. These domains were registered the same day as the attack, note AppRiver researchers who discovered the campaign. From there, attackers can steal the ADP usernames and passwords of unsuspecting victims who fall into the trap.
With an employees ADP credentials in hand, an attacker can commit any number of malicious activities. They could possibly expose bank account numbers or change their direct deposit information and redirect payments to attacker-controlled accounts, a potentially lucrative tactic if the employer doesnt require two-factor authentication (2FA) for this type of important change.
An attacker could also access a range of personal data including name, birth date, physical address, pay stubs, or Social Security number — all the information theyd need to commit identity theft. They could also locate an employees tax documents, which could be used to file fraudulent tax returns on the workers behalf and redirect the funds to attackers accounts.
As tax season approaches, Troy Gill, manager of security research at AppRiver, advises employees to keep in mind that the IRS will never require you to take action via email. All documentation should be handled with caution: When you receive an alert that tax documents are available, directly navigate to the source instead of following an emailed link. And, of course, enable 2FA whenever possible.
Read more details
here
.
Check out 
The Edge
, Dark Readings new section for features, threat data, and in-depth perspectives. Todays top story:
With International Tensions Flaring, Cyber Risk is Heating Up for All Businesses
.

Last News

▸ Debunking Machine Learning in Security. ◂
Discovered: 23/12/2024
Category: security

▸ Researchers create BlackForest to gather, link threat data. ◂
Discovered: 23/12/2024
Category: security

▸ Travel agency fined £150,000 for breaking Data Protection Act. ◂
Discovered: 23/12/2024
Category: security


Cyber Security Categories
Google Dorks Database
Exploits Vulnerability
Exploit Shellcodes

CVE List
Tools/Apps
News/Aarticles

Phishing Database
Deepfake Detection
Trends/Statistics & Live Infos



Tags:
ADP Users Hit with Phishing Scam Ahead of Tax Season