The IT security product company Symantec says that during the last three months it has observed malicious emails claiming to be from the Income Tax Department of India. There have been at least two types of emails in circulation. While each email differs in its template, the goal is the same: to infect computers with an information-stealing Trojan that logs keystrokes. The Trojan also collects system information such as titles of open windows and the operating system version, which are sent back to the attacker’s command and control (C&C) server.
Symantec Security Response has observed two types of emails masquerading as the Indian Income Tax Department. The most popular type announces that thousands of rupees have been deducted from the recipient’s bank account as a tax payment. The emails also contain an attached file that claims to be a receipt for the payment. The alleged receipts are ZIP files that contain information-stealing malware that Symantec detects as Infostealer.Donx.
For more details visit http://www.symantec.com/.
Separately, the National Fraud Intelligence Bureau’s (NFIB) proactive intelligence team are warning that victims are being contacted electronically by fraudsters claiming to be from the Home Office offering them a National ID Card for Commonwealth Citizenship. Fraudsters are selling the “British Commonwealth National cards” to victims for around £150 to £300. The Home Office has said that no such scheme exists.
Scams to be aware of:
Websites that offer jobs in the UK that do not exist. If you apply for one, they tell you that you have the job and ask you to pay visa and work permit fees;
A person who pretends to be a Home Office officer and goes to someone’s home to ask for money to process a partner’s visa. The Home Office will never visit you at home to collect money;
People who target applicants for UK work visas. They ask you to pay a deposit as proof that you have enough funds to support you in the UK until you receive your first salary;
Calls from people who claim they work for the Home Office and tell you there is a serious problem with your visa;
Agents who tell you they can get you a visa using forged documents. The Home Office can easily spot a fake and they will refuse your application if you use them;
Agents who say they can speed up the process of getting a visa. They cannot;
People outside the UK who pretend to be visa officers and offer to meet you somewhere. Legitimate visa officers will only meet you at their offices and will never contact you to ask for money;
Fake websites designed to look like official ones for the UK government or its official visa enquiry services. The fake website may look slightly different with an alternative layout or misspelt words.
