Clicky
Last visit was: Sat Jul 05, 2014 1:18 pm
It is currently Sat Jul 05, 2014 1:18 pm

Phish spoofing US Internal Revenue Service


All times are UTC - 5 hours [ DST ]


 [ 20 posts ]  Go to page Previous  1, 2
Author Message
 PostPosted: Sat Jun 25, 2011 9:50 pm   
Spam Muncher
User avatar

Joined: Wed Jan 03, 2007 10:19 am
Posts: 890
Location: North Britain
They've given up on trying to spell rebate (rabate) properly aiming for the easier 'Tax Refund Online' and the list of bank choices has got so large that they've put it in a pull down menu to stop it looking quite so obvious, same scam though - http://farm4.static.flickr.com/3142/587 ... 5159_b.jpg

_________________
Ruffian antics are a wrench in society's gears


Top
 Profile  
 PostPosted: Sun Jun 26, 2011 3:11 pm   
Spammer Killing Machine
User avatar

Joined: Sun Jun 13, 2010 5:22 pm
Posts: 528
Based upon the phishing incidents reported to PhishTank.com, the (UK) HM Revenue & Customs (HMRC) tax site scams still outnumber the (USA) Internal Revenue Service (IRS) tax site scams. PhishTank may have expedited processing for IRS scam reports; they are typically "decided" much faster than the voting takes for the HMRC scams.

As for the HMRC scams:
Benzyl wrote:
the list of bank choices has got so large that they've put it in a pull down menu to stop it looking quite so obvious, same scam though - http://farm4.static.flickr.com/3142/587 ... 5159_b.jpg
Three "popular" templates are in circulation. I have recently noticed up to 21 banks being spoofed on the same scam webpage.

A screenshot of a nicely done template (used by both IRS and HMRC scams) is at
http://www.phishtank.com/screenshot_pro ... id=1195787


Top
 Profile  
 PostPosted: Sat Oct 20, 2012 1:21 pm   
Spam Muncher
User avatar

Joined: Wed Jan 03, 2007 10:19 am
Posts: 890
Location: North Britain
Ooh, new template for the HMRC scam, slightly more bulletproof comprehensive (and slow). The abused host domain is particularly convincing - httq://www2.hmrc.gov.uk-refunds.gayjohn ... new.co.uk/ zip package can be uploaded if desired?

_________________
Ruffian antics are a wrench in society's gears


Top
 Profile  
 PostPosted: Sun Oct 21, 2012 4:57 pm   
Spammer Killing Machine
User avatar

Joined: Sun Jun 13, 2010 5:22 pm
Posts: 528
Benzyl wrote:
Ooh, new template for the HMRC scam, slightly more bulletproof comprehensive (and slow). The abused host domain is particularly convincing - httq://www2.hmrc.gov.uk-refunds.gayjohninfo.com/hmrc.new.co.uk/ zip package can be uploaded if desired?

I have taken the liberty of posting a warning about the site on WOT and I have posted a corroborating comment on SiteAdviser. When I visited the scam webpages, I was told that I was due a tax refund of £931.50 GBP although I hadn't entered my name or any other data.


Top
 Profile  
 PostPosted: Sun Oct 21, 2012 7:26 pm   
Spammer Killing Machine
User avatar

Joined: Sun Jun 13, 2010 5:22 pm
Posts: 528
Someone may wish to examine the Australian Taxation Office scam at the following site for slightly similar signatures, including a "wait" animation. It offers a $ 887.75 AUD refund.

hXXp://www.rijschoolberman.nl/p-content/themes/minimalisto/lib/admin/panama/oktxt/

(redirection URL: hXXp://www.bad-heizung-dach.com/wp-content//themes/Glowin/includes/red.php )


Top
 Profile  
 [ 20 posts ]  Go to page Previous  1, 2

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: Wayback machine and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  


Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
Style originally created by Volize © 2003 • Redesigned SkyLine by MartectX © 2008