The IRS wants to give you $80 dollars to participate in a survey, yup really.
Aw... alright, so it’s the IRS scam that is back again, this time with a twist.
Users will be receiving SPAM messages from the IRS along these lines:
From: Internal Revenue Service [mailto:security@IRS.gov]
The link directs you to a survey page where the IRS’s satisfaction is measured, product knowledge, etc. The only details requested on this page are your name, phone number and if you want to an email address.
On submission a results page is shown where the credit card details are entered to receive the $80.
Straight forward so far.
So why the phone number?
That’s where the Vish comes into play. Using VoIP to call the person and social engineer information out of them. For example:
Now it might be that the phone number will be used in any case. A credit card number and name is valuable, combined with other personal information it is much more valuable.
There will have been millions of emails sent, so we don’t really want any of those at this stage, but if you know of anyone who has been approached via voice after completing one of these surveys please let us know.
Mark H - Shearwater
Aug 25th 2007
1 decade ago