Tax season in the U.S. brings a special set of threats. If you are filing a tax return, get it done quickly. If you are an accountant, be careful with any requests for your services.
There's a long history of scammers getting in before the legitimate tax filer and claiming the reward. There's also a history of scammers taking over IRS accounts by getting the filer's PIN ahead of them.
While the IRS has taken measures to reduce the likelihood of both scams, we never assume the attackers will just give up. We are always looking for their next creative way to separate you from your money. Get your taxes filed early. If you haven't already secured your PIN, do so.
For accountants, it gets a little more juicy. We constantly see an increase in phishing emails targeting financial clients at this time of year. They are typically targeting accountants, but they aren't always good at their targeting.
While many phishing attackers are just casting wide nets, these are casting a bit smaller nets. Though, they aren't laser targeting to start. They are also willing to play the long game. They don't come out of the gate firing malicious files and emails. They try to build some momentum and trust first. Once they get a response from that initial small net cast, they'll focus in on the prospective victim. They can afford to play the long game because the financial reward will be greater than just stealing a credit card or some healthcare records.
For all you accountants out there (or anyone who could be seen as an accountant by an attacker), be mindful of random, unsolicited emails from people looking for a new accountant to file their tax returns. These may sound legitimate, but could be dangerous for your firm.