Security summit alert: tax pros warned of new scam to steal thei - Quincy Newspapers, Inc. - Print, Broadcast, Interactive

Security summit alert: tax pros warned of new scam to steal their passwords

Updated:
© iStockphoto.com / Dmitriy Shironosov © iStockphoto.com / Dmitriy Shironosov
  • Lifestyle HighlightsLifestyle HighlightsMore>>

  • Top 11 ways to cut your taxes this year

    Top 11 ways to cut your taxes this year

    Friday, February 23 2018 4:10 AM EST2018-02-23 09:10:12 GMT
    iStockphoto.com/DNY59iStockphoto.com/DNY59

    You can give the government less of your money by taking advantage of all the legal tax savings for which you qualify

    You can give the government less of your money by taking advantage of all the legal tax savings for which you qualify

  • Should couples file taxes jointly or separately?

    Should couples file taxes jointly or separately?

    Wednesday, February 21 2018 10:09 PM EST2018-02-22 03:09:17 GMT
    iStockphoto.com/bowie15iStockphoto.com/bowie15

    Married couples have the choice of filing their taxes jointly or separately. What is the best option for you and your spouse?

    Married couples have the choice of filing their taxes jointly or separately. What is the best option for you and your spouse?

  • Why the 2018 tax deadline was moved to April 17

    Why the 2018 tax deadline was moved to April 17

    Wednesday, February 21 2018 4:08 AM EST2018-02-21 09:08:57 GMT
    iStockphoto.com/backyardproductioniStockphoto.com/backyardproduction

    For three years in a row, Americans are going to get a little extra time to file their taxes, thanks to a holiday that may be completely unknown to you

    For three years in a row, Americans are going to get a little extra time to file their taxes, thanks to a holiday that may be completely unknown to you

From IRS.gov

WASHINGTON – The Internal Revenue Service, state tax agencies and the tax industry today warned tax professionals to be alert to a new phishing email scam impersonating tax software providers and attempting to steal usernames and passwords.

This sophisticated scam yet again displays cybercriminals’ tax savvy and underscores the need for tax professionals to take strong security measures to protect their clients and protect their business. This is the time of year when many software providers issue software upgrades and when tax professionals are working to meet the Oct. 15 deadline for extension filers.

These types of phishing scams are why the IRS, state tax agencies and the tax industry, acting as the Security Summit, launched the 10-week Don’t Take the Bait campaign currently underway. This awareness effort highlights the many tactics of cybercriminals as well as the steps tax professionals can take to protect their clients and themselves.

This latest scam email variation comes with a subject line of “Software Support Update” and highlights an “Important Software System Upgrade.” It thanks recipients for continuing to trust the software provider to serve their tax preparation needs and mimics the software providers’ email templates.

The e-mail informs the recipients that due to a recent software upgrade, the preparer must revalidate their login credentials. It provides a link to a fictitious website that mirrors the software provider’s actual login page.

Instead of upgrading software, the tax professionals are providing their information to cybercriminals who use the stolen credentials to access the preparers’ accounts and to steal client information.

The Security Summit reminds tax professionals that software providers do not embed links into emails asking them to validate passwords. Also, tax professionals and taxpayers should never open a link or an attachment from a suspicious email.

Tax professionals can review additional tips to protect clients and themselves at Protect Your Clients, Protect Yourself on IRS.gov.

Tax professionals who receive emails purportedly from their tax software providers seeking login credentials should send those scam emails to their tax software provider. 

For Windows users, follow this process to help the investigation of these scam emails:
 

Use “Save As” to save the scam. Under “save as type” in the drop-down menu, select “plain text” and save to the desktop. Do not click on any links.

Open a new email and attach this saved email as a file.

Send a new email containing the attachment to the tax software provider, as well as a copy to Phishing@IRS.gov.

Remember that all of the web page addresses for the official IRS website, IRS.gov, begin with http://www.irs.gov. Don' t be confused or misled by Internet sites that end in .com, .net, .org or other designations instead of .gov. The address of the official IRS governmental Web site is http://www.irs.gov/.

*DISCLAIMER*: The information contained in or provided through this site section is intended for general consumer understanding and education only and is not intended to be and is not a substitute for professional advice. Use of this site section and any information contained on or provided through this site section is at your own risk and any information contained on or provided through this site section is provided on an "as is" basis without any representations or warranties.
INFORMATIONAL DISCLAIMER The information contained on or provided through this site is intended for general consumer understanding and education only and is not intended to be and is not a substitute for professional financial or accounting advice. Always seek the advice of your accountant or other qualified personal finance advisor for answers to any related questions you may have. Use of this site and any information contained on or provided through this site is at your own risk and any information contained on or provided through this site is provided on an "as is" basis without any representations or warranties.