IRS-themed scam uses Elon Musk’s name to steal crypto and personal data

Tech Radar reports that a sophisticated cryptocurrency scam has been uncovered, impersonating the Internal Revenue Service (IRS) and leveraging the name of Elon Musk to lure victims.

The scam begins with a phishing email designed to appear as an official communication from the IRS, informing recipients they are eligible for a $5,000 financial grant supposedly from Elon Musk. Those who click the provided links are directed to malicious landing pages that aim to harvest sensitive personal and banking information, including full names, addresses, phone numbers, driver's license details, employer information, and bank account and routing numbers.

Beyond identity theft, the attackers also attempt to defraud victims by inviting them to participate in a fake "Elon Musk Dogecoin Initiative." This involves instructing victims to purchase $10,000 worth of Bitcoin from a fraudulent exchange and send it to an attacker-controlled address, with the promise of reimbursement and a small profit.

While initial reports indicate no victims have fallen for the cryptocurrency aspect of the scam, the potential for extensive identity theft and direct financial loss from the stolen banking details remains significant. This incident highlights the ongoing threat of tax-season-related phishing campaigns and the evolving tactics of cybercriminals who exploit public figures and current trends like cryptocurrency to enhance their fraudulent schemes.

Source: Tech Radar