Security Awareness - W2 phishing

A W2 tax email scam is circulating in the U.S. using Typeform, a popular software that specializes in online surveys and form building. The campaign is aimed at harvesting victims’ email account credentials, researchers said.

According to Armorblox, the campaign also bypasses native Google Workspace email security filters in the victims it examined.

“The email impersonated an automated file-sharing communication from OneDrive, informing victims that they had received a file,” researchers explained in an analysis on Tuesday. “The email was sent from a Hotmail ID and was titled ‘RE: Home Loan,’ followed by a reference number and the date, making it seem like the email was part of an ongoing conversation to lend it more legitimacy.”

To read the complete article see:

https://threatpost.com/tax-phish-google-workspace-email-security/165376/ 

See also:

https://www.armorblox.com/blog/blox-tales-w2-tax-scam-using-typeform/