Over the last few years we have encountered a multitude of malicious campaigns whose main objective is to steal from us in one way or another. Now we find a new one that uses the Tax Agency to try to obtain certain private and sensitive data.
Surely on more than one occasion you have been faced with the situation of receiving a certified letter at home that comes from the Treasury. Normally it does not bring us good news, so cyber criminals want to take advantage of that fear. However, instead of using a certified physical letter, as we have seen on other occasions, digital means such as email or messages that reach us on the phone are used here.
This is precisely the case that concerns us at the moment and that we should be aware of so as not to fall into deception. A recent malicious campaign has been detected that uses the aforementioned Tax Agency to make us fall into the trap. Basically the entire framework focuses on the fact that we receive a message via SMS to our mobile phone warning us that a serious incident has been detected in our Income Tax return.
Based on the fact that at this moment many citizens are still waiting for the refund to be collected, this message is a perfect decoy. However, in the event that we have received something of these characteristics, we should be immediately suspicious.
What should I do if I receive the fake SMS from the Treasury
Obviously and as you can imagine, the SMS, or, rather, the text of the message is nothing more than a bait for us to take. The real plot of the scam is found in the attached link that the cyber criminals want you to click on. And, by clicking on it, we are redirected to a supposedly legitimate page of the Tax Agency where we will be asked to identify ourselves.
This is something that we can carry out through our National Identity Document, indicating its expiration date, using a digital certificate, or with the Cl@ve method.
Once we have identified ourselves on this fake website, it will even ask us for the digitized DNI and the latest payroll so that we can upload it in digital format. Obviously all this so that the criminal has this personal data and can do with it whatever he pleases. The range of possibilities that opens up at that moment to use them maliciously is infinite.
Therefore, if we receive this SMS, the first thing we should do is distrust it, since this is not the way in which the Tax Agency will communicate with us to request these very personal data. We may receive informative SMS messages, but never for us to respond. Apart from immediately deleting the message from our terminal, we can also inform the authorities so that they are aware of all this.
In the event that you have clicked on the link and provided this data, yes or yes, you should file the corresponding complaint for what may happen to it later.
