Getting in some Australian phishing over Easter

Oh, they keep getting more and more creative these phisher-people.  Here’s a new one on me – an email that is proported to be from the ATO with details of a tax return.  Just click on the link, etc.

For those who aren’t familiar with the term, phishing involves using technology (usually email or instant messaging) structured to dupe you into providing sensitive information like bank account and credit card details.  Phishers pretend to be someone else – a friend, a bank, a store.

In this particular email, the Subject is: Australian Taxation Office – Notification and the FROM is

However, the body of the email is highly suspect:

After the last annual calculations of your fiscal activity we have determined that you are eligible to receive a tax refund of $173.80
Please submit the tax refund request and allow us 6-9 days in order to process it.

A refund can be delayed for a variety of reasons. For example submitting invalid records or applying after the deadline.

To access the form for your tax refund, please click here

Regards, Australian Government

and, as with many entry-level phishers, if you hover your cursor over the Click here link (removed for your safety), you see the destination they’ve set up — a Turkish web site.

As you can link any old words to any old place — always use the hover and if you get an unusual email asking for sensitive information from an institution you use, call them.