ZeroFox Intelligence Flash Report - Financial Scams Circulate as U.S. Tax Season Nears End

Product Serial: F-2024-03-19a

TLP:CLEAR

In this flash report, ZeroFox researchers provide analysis of a tax return scam targeting U.S. citizens, with a threat actor claiming they are able to supply two types of completed illegitimate Internal Revenue Service (IRS) tax documents which can be used to file fraudulent tax returns.

Standing Intelligence Requirements

Deep Dark Web and Criminal Underground DDW

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/intelligence/advisories/14956

Link to Download

View the full report here

Key Findings

As the end of the U.S. tax season nears, ZeroFox Intelligence has observed an increase in tax fraud-related activity taking place in the deep and dark web (DDW).
On March 9, 2024, a Russian-speaking threat actor posted in DDW forum xss, claiming they are able to supply two types of completed, illegitimate Internal Revenue Service (IRS) tax documents.
Activity of this nature is very likely to increase in frequency over the coming weeks, with threat actors continuing to evolve their techniques, tactics, and procedures (TTPs) to most effectively leverage illicitly-obtained personally identifiable information (PII) that is relatively cheap and easily acquired in DDW forums.