Taking advantage of the time when businesses are busy with tax settlement, cybercriminals have launched a large-scale Phishing campaign impersonating the General Department of Taxation.
Identifying Scam Emails
These emails often have titles that cause confusion such as: "Overdue tax debt notice", "Administrative penalty decision", or "Court summons".
The email content requires the recipient to:
- Click on the link to see details (Link leads to a fake website stealing accounts).
- Download the attached file (File containing Ransomware encrypting data).
Ransomware Warning
If accounting staff download the file to the computer, the malware will immediately encrypt all accounting data and demand a ransom for decryption.
How to check Real - Fake Email
Before performing any action, check carefully:
- Sender address: Tax authority emails always end with
@gdt.gov.vn. Emails ending in@gmail.com,@hotmail.comor strange domains (e.g., gdt-gov.info) are fake. - Digital signature: Electronic documents of state agencies always have a valid digital signature.
- Direct contact: Call the managing tax office to verify information if suspicious.