The AW Amazon Store
Buy Books by AWers!

 

Welcome to the AbsoluteWrite Water Cooler! Please read The Newbie Guide To Absolute Write

Results 1 to 5 of 5

Thread: IRS Phishing E-Mail

  1. #1
    And now, back to Plodding! Duncan J Macdonald's Avatar
    Join Date
    Feb 2005
    Location
    Northern Virginia
    Posts
    1,851

    IRS Phishing E-Mail

    Got a new IRS phishing scam in my home e-mail today. Besides the usual grammatical errors, who would believe that the U.S. Internal Revenue Service would voluntarily provide a refund? Especially to e-mail addresses, when the IRS collects via physical home address.

    After the last annual calculations of your fiscal activity we have determined that you are eligible to receive a tax refund of $63.80. Please submit the tax refund request and allow us 6-9 days in order to process it.

    A refund can be delayed for a variety of reasons. For example submitting invalid records or applying after the deadline.

    To access the form for your tax refund, please click here

    Regards,
    Internal Revenue Service

    Looking at the router droppings, the e-mail originates from a server at the University of Houston, which I believe is hacked. The link (which I've defused in the above quote) points to 207.226.88.28, an address owned by Beyond The Network America, Inc., and sub-leased to IronPath Networks. The specific server addressed is one named "~test", which I also suspect of being hacked.

    I have informed the IRS. They tend to take a dim view of such shennanigans.

    Edited to add: If you get one of these, or any e-mail purportedly from the IRS, forward that e-mail to phishing@irs.gov
    Last edited by Duncan J Macdonald; 05-02-2006 at 06:58 AM.
    R/
    Hamster #164

  2. #2
    Your Genial Uncle Absolute Sage James D. Macdonald's Avatar
    Join Date
    Feb 2005
    Location
    New Hampshire
    Posts
    25,366
    For phishing in general send copies to reportphishing@antiphishing.org

    For phishing that mentions ebay, forward it to spoof@ebay.com

    For phishing that mentions paypay, forward it to spoof@paypal.com

  3. #3
    Sockpuppet Hunter MartyKay's Avatar
    Join Date
    Feb 2005
    Location
    Adelaide
    Posts
    202
    If I did that James, I'd be spending my whole day forwarding mail to ebay and paypal.

    I've been getting a HUGE amount of paypal, ebay and, strangely Chase phishing lately. My poor Gmail account is getting hammered.
    Be Wery Wery Qwiet, I'm Hunting Sockpuppets
    You must be as smart as this stick -> |
    to use the internet |

  4. #4
    Your Genial Uncle Absolute Sage James D. Macdonald's Avatar
    Join Date
    Feb 2005
    Location
    New Hampshire
    Posts
    25,366
    Forward the chase ones to abuse@chase.com

    If you have a real email account, and use a real mail client (IMHO, Gmail sucks rocks), you can get PopFile from Sourceforge (freeware) to sort all the various sheep and goats into their appropriate pens. Then it's an easy task to group forward the lot of 'em.

  5. #5
    I grow my own catnip JulieB's Avatar
    Join Date
    Feb 2006
    Location
    Deep in the heart o' Texas
    Posts
    2,399
    I've been getting hammered with Chase spoofs as well. It's doubly interesting for me because a foriegn client pays me though them. Since English is not the primary language at the branch in question some of the subject lines have looked just like spam. I don't think I've lost any message so far (I'm getting paid), but it's a pain. I use a whitelist and a bayesian filter, but their not perfect.

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Custom Search