Security News > 2020 > February > Latest Tax Scams Target Apps and Tax-Prep Websites

The attacks are emerging alongside the traditional e-mail based attacks that try to trick users into installing malware that can steal credentials or take control of systems.

Attackers this year are focusing on smaller tax-preparation firms probably because "Smaller companies often have fewer resources and less expertise to prevent these attacks and detect them when they've happened," he wrote.

Some rather unlikely sectors emerged as more likely threats during the 2019 tax season-in particular, the construction industry which, alongside financial firms, are at higher risk of attack this year, he said.

"Attackers use these vulnerabilities to get access to the site, make changes to the sites' webpages in ways that can only be seen if you view the sites raw HTML," he wrote.

The company also advised those who own tax preparation and accounting companies to bolster protections by ensuring their sites are hosted with providers that keep their sites patched and handle security for them.

News URL

https://threatpost.com/latest-tax-scam-target-apps-and-tax-prep-websites/152998/