Phish spoofing US Internal Revenue Service

Benzyl · **Posted:** Sat Jun 25, 2011 9:50 pm

They've given up on trying to spell rebate (rabate) properly aiming for the easier 'Tax Refund Online' and the list of bank choices has got so large that they've put it in a pull down menu to stop it looking quite so obvious, same scam though - http://farm4.static.flickr.com/3142/587 ... 5159_b.jpg

NotBuyingIt · **Joined:** Sun Jun 13, 2010 5:22 pm **Posts:** 528

Based upon the phishing incidents reported to PhishTank.com, the (UK) HM Revenue & Customs (HMRC) tax site scams still outnumber the (USA) Internal Revenue Service (IRS) tax site scams. PhishTank may have expedited processing for IRS scam reports; they are typically "decided" much faster than the voting takes for the HMRC scams.

As for the HMRC scams:

Benzyl wrote:

the list of bank choices has got so large that they've put it in a pull down menu to stop it looking quite so obvious, same scam though - http://farm4.static.flickr.com/3142/587 ... 5159_b.jpg

Three "popular" templates are in circulation. I have recently noticed up to 21 banks being spoofed on the same scam webpage.

A screenshot of a nicely done template (used by both IRS and HMRC scams) is at
http://www.phishtank.com/screenshot_pro ... id=1195787

Benzyl · **Posted:** Sat Oct 20, 2012 1:21 pm

Ooh, new template for the HMRC scam, slightly more bulletproof comprehensive (and slow). The abused host domain is particularly convincing - httq://www2.hmrc.gov.uk-refunds.gayjohn ... new.co.uk/ zip package can be uploaded if desired?

NotBuyingIt · **Joined:** Sun Jun 13, 2010 5:22 pm **Posts:** 528

Benzyl wrote:

Ooh, new template for the HMRC scam, slightly more bulletproof comprehensive (and slow). The abused host domain is particularly convincing - httq://www2.hmrc.gov.uk-refunds.gayjohninfo.com/hmrc.new.co.uk/ zip package can be uploaded if desired?

I have taken the liberty of posting a warning about the site on WOT and I have posted a corroborating comment on SiteAdviser. When I visited the scam webpages, I was told that I was due a tax refund of £931.50 GBP although I hadn't entered my name or any other data.

NotBuyingIt · **Joined:** Sun Jun 13, 2010 5:22 pm **Posts:** 528

Someone may wish to examine the Australian Taxation Office scam at the following site for slightly similar signatures, including a "wait" animation. It offers a $ 887.75 AUD refund.

hXXp://www.rijschoolberman.nl/p-content/themes/minimalisto/lib/admin/panama/oktxt/

(redirection URL: hXXp://www.bad-heizung-dach.com/wp-content//themes/Glowin/includes/red.php )

InBoxRevenge KS Forum

Phish spoofing US Internal Revenue Service

Who is online