Virus Emails - "2014 Tax Payment Issue" or "Your Tax Return was Incorrectly Filled Out"

Updated: January 25, 2015 2015-01-25T21:22:40 -
Posted: January 25, 2015 2015-01-25T20:49:05
Views: 1,314
Comments: 0

The fake email messages below with the subject: "2014 Tax Payment Issue" or "Your Tax Return was Incorrectly Filled Out," have malicious Microsoft Word or Excel documents attached to them that will infect your Windows computer if you open them. The messages were sent by cyber-criminals who designed them to trick the recipients into opening the malicious attachments. So, if you have received the same email messages, please do not attempt to open the attachments.

The Virus Email Messages

Subject: 2014 Tax Payment Issue, Your Tax Return was Incorrectly Filled Out
Attachment: 23 January 2015 : TAX_38156WHH.doc, 23.01.15_3406ICZ.xls

According to your tax payments for 2014 year period we found that you gave a wrong legal address in your last tax payment.in order to avoid penalty fees on your tax dues we ask you to contact our specialist having checked the previous payment in advance (the DOC invoice attached below).

Regards
Conner
Tax Officer

Attention: Manager

This is to inform you that your legal address was filled incorrectly while completing the last tax form application for 2014 year.

In order to avoid penalty fees during the next tax period please contact our expert as soon as you check the payment details (the DOC invoice attached below).

Regards
Marcus
Tax Inspector

Attention: Accountant

This is to inform you that your legal address was filled incorrectly while completing the last tax form application for 2014 year.

In order to avoid penalty fees during the next tax period please contact our expert as soon as you check the payment details (the DOC invoice attached below).

Regards
Lupe
Tax Inspector

The email messages contain the malicious Microsoft Word document (TAX_38156WHH.doc) or the Microsoft Excel document (23.01.15_3406ICZ.xls) that is dangerous to you if you open it and enable "Macros" or "Enable content". Never open Microsoft Office documents and enable Macros or "Content" unless you were expecting the email message from someone. Note: the document names may change.

The cybercriminals behind these malicious email messages aims are to trick the curious recipients into opening the malicious attachment, which will infect their computers with a virus or Trojan horse.

Once their computers have become infected with this malicious Trojan horse, the cybercriminals behind this email message will be able to access and take control of their computers remotely from anywhere around the world. They may spy on them, use their computers to commit cybercrimes, or steal their personal and financial information.

Now, if you have already opened the malicious attachment, please do a full scan of your computer with the antivirus software installed on it. The name of the attachment may change, so be careful when opening email attachments.

If you don’t have antivirus software installed on your computer, please click here for a list of free antivirus software.

For a list of other virus email messages, please click here.

Note: Some of the names, addresses, email addresses and telephone numbers in email samples on this website may have been impersonated.

Please share what you know or ask a question about this article by leaving a comment below. Also, check the comment section below for additional information, if there is any.

Remember to forward suspicious, malicious, or phishing email messages to us at the following email address: info@onlinethreatalerts.com

Also, report missing persons, scams, untrustworthy, or fraudulent websites to us. Tell us why you consider the websites untrustworthy or fraudulent.

If you want to quickly find answers to your questions, use our search engine.

You can help maintain Online Threat Alerts by paying a service fee. Click here to make payment.

Comments, Questions, Answers, or Reviews

(Total: 0)

To help protect your privacy, please do not post or remove, your full name, telephone number, email address, username, password, account number, credit card information, home address or other sensitive information in or from your comments, questions, or reviews. Also, anonymous posts cannot be deleted or edited, and when you make a post, we will use your IP address to display your approximate location to other users.