{"id":86,"date":"2019-04-06T19:33:15","date_gmt":"2019-04-06T19:33:15","guid":{"rendered":"http:\/\/www.syyhoaxanalyzer.com\/?p=86"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T17:00:00","slug":"\"Official-Tax-Declaration\";-Email-Links-to-Malware","status":"publish","type":"post","link":"https:\/\/www.syyhoaxanalyzer.com\/?p=86","title":{"rendered":"&#8220;Official Tax Declaration&#8221;; Email Links to Malware"},"content":{"rendered":"<div>\n<p><span style=\"color: #ff0000;\"><strong>Outline:<\/strong><\/span><br \/>\n&#8220;Official Notification&#8221; email claims that the Department of Finance of Australia in collaboration with the Australia Revenue Agency has discovered that your 2016 tax declaration appeared to be imprecise and you currently have an outstanding \u00a0tax debt as a result. The email instructs you to click a link to download a &#8220;Tax Declaration&#8221; and then take the document to \u00a0the nearest CRA\/DFC office within 21 days.<\/p>\n<p><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<!-- HS Net Top Content Responsive --><br \/>\n<ins class=\"adsbygoogle\"\n     style=\"display:block\"\n     data-ad-client=\"ca-pub-0355887770822260\"\n     data-ad-slot=\"4870821038\"\n     data-ad-format=\"auto\"><\/ins><br \/>\n<script>\n(adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><br \/>\n<span style=\"color: #ff0000;\"><strong>Brief Analysis:<\/strong><\/span><br \/>\nThe email is not from any Australian \u00a0government department. In fact, there is no tax-related \u00a0Australian Government entity \u00a0called the &#8220;Australia Revenue Agency&#8221;.  \u00a0Nor is it from the Australian Taxation Office (ATO) as suggested by the stolen logo featured in the message.<\/p>\n<p>The bogus email is designed to trick you into downloading and installing malware.  \u00a0If you click the &#8220;Download Tax Declaration&#8221; link, a .zip file will be downloaded to your computer. The .zip file contains a JavaScript (.js) file.<\/p>\n<p>If the ,js file is opened, it can then download and install malware on your computer.<\/p>\n<p>The malware that is installed will often be ransomware. Ransomware encrypts the files on your computer and then demands that you pay a fee to online criminals to receive \u00a0the decryption key. Or, the malware may be designed to steal sensitive \u00a0information such as banking passwords from the infected computer.<\/p>\n<p>Fake tax agency emails are <a title=\"ATO \u00e2\u20ac\u0153Incoming Fax Report\" Malware Email\" href=\"http:\/\/hoax-slayer.net\/ato-incoming-fax-report-malware-email\/\">commonly used to distribute malware<\/a>. If you receive such an email, do not click any links or open any attachments \u00a0that it contains.<\/p>\n<p><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<!-- HSNet Article Center --><br \/>\n<ins class=\"adsbygoogle\" style=\"display: block;\" data-ad-client=\"ca-pub-0355887770822260\" data-ad-slot=\"5727909035\" data-ad-format=\"auto\"><\/ins><br \/>\n<script>\n(adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><\/p>\n<div class=\"example\"><span style=\"color: #ff0000;\"><b>Example:<\/b><\/span><br \/>\n<strong>Subject: OFFICIAL NOTIFICATION REGARDING YOUR TAX DECLARATION<\/strong><\/p>\n<p>Dear resident [Name Removed],<\/p>\n<p>The Department of Finance of Australia in collaboration with Australia Revenue Agency has been performing checks of tax declarations regarding the fiscal year 2016. Your tax declaration appeared to be imprecise. As a result, you currently have an outstanding tax debt which shall be either justified or serviced.Kindly bring with you a printed copy of the attached document, a copy of your revenue declaration 2016 and your ID card\/passport. To learn more about this procedure please download attached declaration:&#8221;DOWNLOAD TAX DECLARATION&#8221;Please make sure you visit the nearest CRA\/DFC office within 21 days following the receipt of this notification.<br \/>\nBring with you your ID and a copy of the attached document containing unique ID of your case.<\/p>\n<p><a href=\"http:\/\/hoax-slayer.net\/wp-content\/uploads\/2016\/12\/tax-declaration-malware-1.jpg\" data-rel=\"penci-gallery-image-content\" ><img loading=\"lazy\" decoding=\"async\" data-attachment-id=\"4063\" data-permalink=\"https:\/\/www.hoax-slayer.net\/official-tax-declaration-email-links-to-malware\/tax-declaration-malware-1\/\" data-orig-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2016\/12\/tax-declaration-malware-1.jpg\" data-orig-size=\"800,465\" data-comments-opened=\"0\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"tax-declaration-malware-1\" data-image-description=\"\" data-medium-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2016\/12\/tax-declaration-malware-1-300x174.jpg\" data-large-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2016\/12\/tax-declaration-malware-1.jpg\" class=\"aligncenter size-full wp-image-4063\" src=\"https:\/\/hoax-slayer.net\/wp-content\/uploads\/2016\/12\/tax-declaration-malware-1.jpg\" alt=\"Tax Declaration Malware Email\" width=\"800\" height=\"465\" srcset=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2016\/12\/tax-declaration-malware-1.jpg 800w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2016\/12\/tax-declaration-malware-1-300x174.jpg 300w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2016\/12\/tax-declaration-malware-1-768x446.jpg 768w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/a><\/p>\n<\/div>\n<p><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<!-- Third Content Ad Responsive --><br \/>\n<ins class=\"adsbygoogle\"\n     style=\"display:block\"\n     data-ad-client=\"ca-pub-0355887770822260\"\n     data-ad-slot=\"1909104632\"\n     data-ad-format=\"auto\"><\/ins><br \/>\n<script>\n(adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><\/p>\n<div align=\"center\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<!-- HS Net Bottom AdLinks --><br \/>\n<ins class=\"adsbygoogle\" style=\"display: block;\" data-ad-client=\"ca-pub-0355887770822260\" data-ad-slot=\"1358951439\" data-ad-format=\"link\"><\/ins><br \/>\n<script>\n(adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><\/div>\n<p class=\"date\">Last updated: December 20, 2016<br \/>\nFirst published: December 20, 2016<br \/>\nBy Brett M. Christensen<br \/>\n<a class=\"foot\" href=\"http:\/\/www.hoax-slayer.com\/about.shtml\">About Hoax-Slayer<\/a><\/p>\n<p class=\"ref\">References<br \/>\n<a title=\"ATO \u00e2\u20ac\u0153Incoming Fax Report\" Malware Email\" href=\"http:\/\/hoax-slayer.net\/ato-incoming-fax-report-malware-email\/\">ATO \u00e2\u20ac\u0153Incoming Fax Report&#8221; Malware Email<\/a><br \/>\n<a title=\"Fake ATO \u00e2\u20ac\u0153Online Activity Statement\" Email Links To Malware\" href=\"http:\/\/hoax-slayer.net\/fake-ato-online-activity-statement-email-links-to-malware\/\">Fake ATO \u00e2\u20ac\u0153Online Activity Statement&#8221; Email Links To Malware<\/a><\/p>\n<p><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<!-- HS Net Primary Matched Content --><br \/>\n<ins class=\"adsbygoogle\" style=\"display: block;\" data-ad-client=\"ca-pub-0355887770822260\" data-ad-slot=\"2703041438\" data-ad-format=\"autorelaxed\"><\/ins><br \/>\n<script>\n(adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><\/p>\n<p><\/br><\/br> Original Source : <a href=\"https:\/\/www.hoax-slayer.net\/official-tax-declaration-email-links-to-malware\/\" target=\"_blank\">https:\/\/www.hoax-slayer.net\/official-tax-declaration-email-links-to-malware\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Outline: &#8220;Official Notification&#8221; email claims that the Department of Finance of Australia in collaboration with the Australia Revenue Agency has discovered that your 2016 tax declaration appeared to be imprecise and you currently have an outstanding \u00a0tax debt as a result. The email instructs you to click a link to download a &#8220;Tax Declaration&#8221; and [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":6890,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-86","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hoax-inggris"],"_links":{"self":[{"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/posts\/86"}],"collection":[{"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=86"}],"version-history":[{"count":0,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/posts\/86\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/media\/6890"}],"wp:attachment":[{"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=86"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=86"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=86"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}