IRS Unveils “Dirty Dozen” List of Tax Scams for 2020; Americans urged vigilance for these threats during the pandemic and its aftermath

Ransomware

This is a growing cybercrime. Ransomware is malware targeting human and technical weaknesses to infect a potential victim’s computer, network or server. Malware is a form of invasive software that is often frequently inadvertently downloaded by the user. Once downloaded, it tracks keystrokes and other computer activity. Once infected, ransomware looks for and locks critical or sensitive data with its own encryption. In some cases, entire computer networks can be adversely impacted.

Victims generally aren’t aware of the attack until they try to access their data, or they receive a ransom request in the form of a pop-up window. These criminals don’t want to be traced so they frequently use anonymous messaging platforms and demand payment in virtual currency such as Bitcoin.

Cybercriminals might use a phishing email to trick a potential victim into opening a link or attachment containing the ransomware. These may include email solicitations to support a fake COVID-19 charity. Cybercriminals also look for system vulnerabilities where human error is not needed to deliver their malware.

The IRS and its Security Summit partners have advised tax professionals and taxpayers to use the free, multi-factor authentication feature being offered on tax preparation software products. Use of the multi-factor authentication feature is a free and easy way to protect clients and practitioners’ offices from data thefts. Tax software providers also offer free multi-factor authentication protections on their Do-It-Yourself products for taxpayers.