Security News

Court papers indicate text messages from HMRC's 60886 number could snoop on Brit taxpayers' locations
2022-01-27 11:59

Court documents obtained by The Register show that the secret surveillance capability was baked into otherwise mundane bulk SMS sending carried out by MMGRP Ltd. The tax collection agency, which has the power to retrospectively change laws, had been using SMS reminder messages as an enforcement tool. We asked HMRC for comment, posing a series of questions including how long had it used HLR look-up techniques against taxpayers; did HMRC obtain necessary warrants to carry out HLR lookups and, if so, under what legislation and from which courts; how many times it had used this technique; under what circumstances it was deployed; and is the capability present in a contract with its new supplier.

HMRC phishing scam abuses mail service to bypass spam filters
2020-12-02 17:10

Threat actors are exploiting legitimate SendGrid mailing service to spoof HMRC phishing emails that bypass spam filters. Email delivery service abused for spoofing HMRC emails.

HMRC smishing tax scam targets UK banking customers
2020-11-08 13:10

The smishing campaign is concerning as it employs multiple HMRC phishing domains and tactics, with new domains added every day as older ones get flagged by spam filters. Not only do the phishing pages mimic HMRC's web interface meticulously, but they also have entire online banking workflows built into them, depending on who your banking provider is.

UK tax collectors warn contractors about being ripped-off – and not by HMRC for a change
2019-11-21 07:05

Self-assessment phishing and phone scam alert raised The UK’s tax authorities have issued an official warning to contractors to watch out for self-assessment scams - and they don’t mean IR35 for a change.…

HMRC 'disciplined' almost 100 employees for computer misuse over 24 months
2019-10-01 12:45

Email, social media and telecomms kit abused at the tax collector Almost 100 staff at UK tax collector HMRC faced disciplinary action for computer misuse in the previous two full financial years.…

HMRC's HTTPS howler: Childcare payments site cert expired at 1am on Sunday, down for hours
2019-09-23 13:03

Gov.uk portal finally lurched back to life after lunch Furious parents have lashed out at Her Majesty's Revenue and Customs after the UK tax authority let a key HTTPS certificate expire on its...

Maybe double-check that HMRC email? UK taxman remains a fave among the phisherfolk
2019-07-16 17:00

And Windows XP is alive and not well in the public sector The UK's National Cyber Security Centre (NCSC) has had another busy year trying to disrupt cybercrime.…

Just keep slurping: HMRC adds two million taxpayers' voices to biometric database
2019-01-25 13:45

But thousands opting out in 'backlash', says privacy group HMRC's database of Brits' voiceprints has grown by 2 million since June – but campaign group Big Brother Watch has claimed success as...

HMRC collected voiceprints of 5.1 million UK taxpayers
2018-06-25 20:28

Her Majesty’s Revenue and Customs (HMRC) has collected voiceprints of some 5.1 million UK taxpayers without their explicit consent, and won’t reveal whether these IDs are shared with other...

HMRC has amassed voice profiles of 5.1 MEEELLION taxpayers
2018-06-25 11:50

Big Brother Watch questions legal basis for data retention Campaign group Big Brother Watch has accused HMRC of creating ID cards by stealth after it was revealed the UK taxman has amassed a...