How Phishing Scams Work During Tax Season
Phishers often spoof the IRS or payroll services to trick you into opening a “W-9” or tax-form PDF that contains malicious macros—Emotet being the most notorious example. Researchers have observed Emotet delivered via fake W-9 attachments that, once enabled, unleashed a Trojan capable of stealing credentials and deploying further malware. As tax-deadline urgency rises, attackers also leverage exploit kits on…