Phish spoofing US Internal Revenue Service

Phishing operations, including perpetrators, how to report them and get them shut down.

Re: Phish spoofing US Internal Revenue Service

Postby Benzyl » Sat Jun 25, 2011 9:50 pm

They've given up on trying to spell rebate (rabate) properly aiming for the easier 'Tax Refund Online' and the list of bank choices has got so large that they've put it in a pull down menu to stop it looking quite so obvious, same scam though - http://farm4.static.flickr.com/3142/587 ... 5159_b.jpg
Ruffian antics are a wrench in society's gears
User avatar
Benzyl
Spam Muncher
 
Posts: 889
Joined: Wed Jan 03, 2007 10:19 am
Location: North Britain

Re: Phish spoofing US Internal Revenue Service

Postby NotBuyingIt » Sun Jun 26, 2011 3:11 pm

Based upon the phishing incidents reported to PhishTank.com, the (UK) HM Revenue & Customs (HMRC) tax site scams still outnumber the (USA) Internal Revenue Service (IRS) tax site scams. PhishTank may have expedited processing for IRS scam reports; they are typically "decided" much faster than the voting takes for the HMRC scams.

As for the HMRC scams:
Benzyl wrote:the list of bank choices has got so large that they've put it in a pull down menu to stop it looking quite so obvious, same scam though - http://farm4.static.flickr.com/3142/587 ... 5159_b.jpg
Three "popular" templates are in circulation. I have recently noticed up to 21 banks being spoofed on the same scam webpage.

A screenshot of a nicely done template (used by both IRS and HMRC scams) is at
http://www.phishtank.com/screenshot_pro ... id=1195787
NotBuyingIt
Spammer Killing Machine
 
Posts: 612
Joined: Sun Jun 13, 2010 5:22 pm

Re: Phish spoofing US Internal Revenue Service

Postby Benzyl » Sat Oct 20, 2012 1:21 pm

Ooh, new template for the HMRC scam, slightly more bulletproof comprehensive (and slow). The abused host domain is particularly convincing - httq://www2.hmrc.gov.uk-refunds.gayjohn ... new.co.uk/ zip package can be uploaded if desired?
Ruffian antics are a wrench in society's gears
User avatar
Benzyl
Spam Muncher
 
Posts: 889
Joined: Wed Jan 03, 2007 10:19 am
Location: North Britain

Re: Phish spoofing US Internal Revenue Service

Postby NotBuyingIt » Sun Oct 21, 2012 4:57 pm

Benzyl wrote:Ooh, new template for the HMRC scam, slightly more bulletproof comprehensive (and slow). The abused host domain is particularly convincing - httq://www2.hmrc.gov.uk-refunds.gayjohninfo.com/hmrc.new.co.uk/ zip package can be uploaded if desired?

I have taken the liberty of posting a warning about the site on WOT and I have posted a corroborating comment on SiteAdviser. When I visited the scam webpages, I was told that I was due a tax refund of £931.50 GBP although I hadn't entered my name or any other data.
NotBuyingIt
Spammer Killing Machine
 
Posts: 612
Joined: Sun Jun 13, 2010 5:22 pm

Re: Phish spoofing US Internal Revenue Service

Postby NotBuyingIt » Sun Oct 21, 2012 7:26 pm

Someone may wish to examine the Australian Taxation Office scam at the following site for slightly similar signatures, including a "wait" animation. It offers a $ 887.75 AUD refund.

hXXp://www.rijschoolberman.nl/p-content/themes/minimalisto/lib/admin/panama/oktxt/

(redirection URL: hXXp://www.bad-heizung-dach.com/wp-content//themes/Glowin/includes/red.php )
NotBuyingIt
Spammer Killing Machine
 
Posts: 612
Joined: Sun Jun 13, 2010 5:22 pm

Previous

Return to Phishers

Who is online

Users browsing this forum: No registered users and 1 guest

cron