I received this notice that my annual income for the last tax year has increased and that I should review my report using the link provided. I followed the link and it takes you to rep1041.kr
.kr is the Internet country code top-level domain (ccTLD) for South Korea, something I highly doubt that the US Government would use to post your tax return on :)
The site will tell you that you need the latest version of Macromedia Flash and offers you a download. Under that text, is the State Revenue Service to make it look official.
While you’re reviewing the page, the site is hard at work trying to deliver you the Trojan:Win32/SWF.F virus which gives the attacker full control of your PC.
The message and screen shot of the attack are listed below.
—————-
Dear taxpayer,
The Federal income tax is a progressive tax, meaning that the more you earn, the higher your tax rate. Your tax rate depends not just upon your taxable income, but also upon your filing status (single, married filing jointly, etc.).
You’re in a higher tax bracket because:
- your annual income for the last tax year has increased.
Please review your annual tax report immediately at:
get report
Message
ID: TR9876SJYRNBD19920354562UJQPMASNZS832T
