Snapchat among companies duped in tax-fraud scam

SAN FRANCISCO - Tax-filing season is turning into a nightmare for thousands of employees whose companies have been duped by email fraudsters.

See Full Article

A major phishing scheme has tricked several major companies - among them, the messaging service Snapchat and disk-drive maker Seagate Technology - into relinquishing tax documents that exposed their workers' incomes, addresses and Social Security numbers.

The scam, which involved fake emails purportedly sent by top company officials, convinced the companies involved to send out W-2 tax forms that are ideal for identity theft. For instance, W-2 data can easily be used to file bogus tax returns and claim fraudulent refunds.

The embarrassing breakdowns have prompted employers to apologize and offer free credit monitoring to employees. Such measures, however, won't necessarily shield unwitting victims from the headaches that typically follow identity theft.

"This mistake was caused by human error and lack of vigilance, and could have been prevented," Seagate's chief financial officer, Dave Morton, wrote in a March 4 email to the company's employees about the breach.

The swindlers behind the tax scam are exploiting human gullibility rather than weaknesses in computer or Internet security. They have targeted company payroll and personnel departments, in many instances with emails claiming to be requests from the company CEO asking for copies of worker W-2s.

The schemes are so widespread that the IRS sent a March 1 notice alerting employers' payroll departments of the spoofing emails. The agency said the scheme has so far claimed "several victims," but declined Tuesday to disclose how many other employers had reported releasing W-2s to unauthorized parties. The IRS said it's seen a 400 per cent increase in phishing and computer malware incidents this tax-filing season.

The federal alert didn't come soon enough for Snapchat, which on Feb. 28 revealed that its payroll department had been duped by an email impersonating its CEO, Evan Spiegel. The Los Angeles company didn't specify how many employee W-2s it released. Snapchat didn't respond to requests for comment Tuesday.

"When something like this happens, all you can do is own up to your mistake, take care of the people affected, and learn from what went wrong," Snapchat wrote in a post on its corporate blog .

Seagate acknowledged surrendering the W-2s for all of its current and former employees who worked at the company last year. The Cupertino, California, company said "several thousand" people were affected, but declined to be more precise. As of July last year, Seagate employed about 52,000 workers but all but 10,500 of them were based in Asia.

Both Snapchat and Seagate notified federal authorities about the phishing attacks and are offering affected workers two years of free credit monitoring.

It's unclear how many other employers have been sucked into the tax scam. Hundreds of companies appear to have been targeted, according to Stu Sjouwerman, CEO of KnowBe4, a Florida company that trains employers to detect and avoid such scams.

Phishing attacks commonly occur during holidays and other annual events, such as tax season, to prey upon people's routines, said Farih Orhan, director of technology at security firm Comodo. The attacks are becoming increasingly effective because they rely on powers of persuasion instead of an attachment or link that might raise suspicion, said Ed Jennings, chief operating officer at email security company Mimecast.

"It's just like someone who convinces you to hand over $20 on the street," Jennings said.

Sjouwerman said the W-2 seeking attacks are most likely are being sent by Eastern European hacker groups planning to sell the information or claim fraudulent tax refunds.

The most effective phishing attacks use emails decked in company logos and colours to reduce the chances of detection, Orhan said. It's relatively easy for con artists to pose as a CEO online, since they can quickly fetch convincing details from a Google search or a perusal of professional networking service LinkedIn.

That doesn't excuse payroll or personnel departments who reflexively acquiesce to requests in apparently legitimate email, experts say. For instance, Sjouwerman said his firm's controller received a phishing email that, at first glance, appeared to be sent by him. But the email asked the controller to "kindly prepare" employees' W-2s, a phrase that he never uses. Company employees were alert enough not to send out the W-2s.

Even without a red flag like that, payroll and personnel specialists should be trained well enough to question why a CEO needs to see individual worker W-2s in the first place.

"It's a case of: 'Oh, the boss wants it'," Sjouwerman said. "They stop thinking, 'Why would this be?"'

-----

AP Technology Writer Brandon Bailey contributed to this report.



Advertisements

Latest Economic News

  • China, Philippines to roll out $3.7B in co-operation projects

    Economic CTV News
    BEIJING -- China and the Philippines have agreed on $3.7 billion worth of projects to boost co-operation, state media cited a senior Chinese official as saying, highlighting the improvement in their formerly frosty relations. Commerce Minister Gao Hucheng said after a Monday meeting with a Cabinet delegation from the Philippines that the projects are aimed at "improving people's living standards," the official Xinhua News Agency reported. Source
  • Dubai airport named world's busiest international airport

    Economic CTV News
    DUBAI, United Arab Emirates - Dubai remains home to the world's busiest international airport after seeing 83.6 million passengers in 2016. However, the figures released on Tuesday by Dubai International Airport fall short of an estimate of 85 million passengers authorities had hoped to have. Source
  • Asian stock indexes mixed as Trump uncertainties mount

    Economic CTV News
    TOKYO -- Asian shares were mixed Tuesday as uncertainty mounted over U.S. President Donald Trump's trade and regulatory policies. KEEPING SCORE: Japan's benchmark Nikkei 225 slipped 0.2 per cent to 18,845.89. Australia's S&P/ASX 200 added 0.7 per cent to 5,651.20. Source
  • Samsung's earnings more than double on record chip profits

    Economic CTV News
    SEOUL, Korea, Republic Of -- Samsung Electronics said Tuesday that its fourth-quarter profit more than doubled over a year earlier thanks to record-high earnings from its brisk memory chip business and strong smartphone sales despite costly Galaxy Note 7 recalls. Source
  • Trump in Asia: Region poised for change as new era dawns

    Economic CTV News
    BEIJING -- People across Asia are poised for a potentially dramatic change in relations with Washington under President Donald Trump after decades with the United States as a major military and economic presence. The clues Trump has given about his foreign policy are a break with former President Barack Obama's "pivot to Asia," which re-emphasized American engagement in the region. Source
  • Judge postpones sentencing of PG&E in case tied to blast

    Economic CTV News
    SAN FRANCISCO -- A federal judge said Monday he is inclined to require Pacific Gas & Electric Co. to mention its convictions in ads and have employees do thousands of hours of community service as part of its sentence in a criminal case stemming from a deadly natural gas explosion in the San Francisco Bay Area. Source
  • Quebec judge authorizes taxi industry-led class action against Uber

    Economic CTV News
    MONTREAL - Taxi companies and drivers across Quebec are claiming a first victory in their battle against Uber after a judge on Monday authorized their class action against the ride-hailing company. The taxi industry is seeking "hundreds of millions" against the U.S. Source
  • Chan Zuckerberg Initiative signs deal to acquire Toronto tech company Meta

    Economic CTV News
    Facebook CEO Mark Zuckerberg, left,with his wife, Priscilla Chan, rehearse for a speech in San Francisco on Tuesday, Sept. 20, 2016. Zuckerberg and Chan have a new lofty goal: to cure, manage or eradicate all disease by the end of this century. Source
  • Trump's busy 'Day 1' takes Wall Street for a ride

    Economic CBC News
    North American financial markets lost ground during President Donald Trump's first full weekday in office, as the new U.S. administration signalled that it's serious about upending the economic status quo. Monday's developments included Trump's formal withdrawal of the U.S. Source
  • Taiwanese iPhone assembler Foxconn may invest $7B in U.S. plant

    Economic CTV News
    Foxconn, a major assembler of iPhones and other electronics, may invest $7 billion in a plant for manufacturing display panels that would create as many as 50,000 jobs in the U.S. Foxconn CEO Terry Gou discussed the potential expansion Sunday during a company meeting in Taiwan, the company's home country. Source