Emotet Gets Ready for Tax Season With Malicious W-9 Forms

[silversurfer]

Content source

https://www.bleepingcomputer.com/news/security/emotet-gets-ready-for-tax-season-with-malicious-w-9-forms/

The Emotet Trojan is getting ready for the tax season with a fresh spam campaign pretending to be signed W-9 tax forms.

A new campaign discovered by email security company Cofense, where the Emotet operators are sending spam pretending to be a requested signed W-9 tax form.

With 2019 behind us, accounting departments are starting to issue tax forms needed for preparing the 2019 tax returns. As part of this process, companies request a signed W-9 form from their clients, independent contractors, and other people they do business.

With there always being something to do, it is common for a person to sign a W-9 form and quickly shoot it back to the company in a brief email.

This new Emotet spam campaign captures this feeling perfectly by using brief emails with a simple "Please see attached" and a fake W-9.doc attachment.

Spam email pretending to be Signed W-9​

 

[Antus67]

I just filed my taxes with a reputable auditing firm and that solves the problem. I've never trusted the email on anything from the IRS as they don't send information via email.