Just in time for tax filing season in the U.S., a phishing message purporting to come from Intuit. Intuit’s security center lists lots of these, but not the two I got this week. Both had empty graphics placeholders and broken hyperlinks — maybe the work of a baby spammer.
Sender: INTUIT INC. (onlinebanking@ealerts.bankofamerica.com) — it claims to come from Intuit, but the return address is at Bank of America
Subject: Please provide your tax information. (a second version had an exclamation point before the period)
Text:
Version 1:
Hello,
With intent to ensure that accurate data is being maintained on our systems, as well as to provide you better quality of service; INTUIT INC. has partaken in the Internal Revenue Service [IRS] Name and TIN Matching Program.
We have discovered, that your name and/or TIN, that is indicated on your account is different from the data on file with the IRS and/or SSA.
In order to verify the information on your account, please click here. (link leads to http://{int_link} — I don’t think that one will work, this site agrees)
Yours sincerely,INTUIT INC.
Corporate Headquarters
2632 Marine Way
Mountain View, CA 94043
Version 2:
Dear Sir/Madam,
With intent to guarantee that correct data is being sustained on our systems, as well as to be able to grant you better quality of service; INTUIT INC. has partaken in the Internal Revenue Service [IRS] Name and TIN Matching Program.
We have discovered, that your name and/or Social Security Number, that is stated on your account does not match the information on file with the IRS.
In order to check and update your account, please enter the secure section. (link leads to http://{int_link} )
Yours sincerely,
INTUIT INC.
Corporate Headquarters
2632 Marine Way
Mountain View, CA 94043
Robert says
I got 15 of these in the past 2 days! The subjects included: