Skip to main content

If you have received a supposed email from the Tax Agency, be careful, it may contain malware.

INCIBE has detected a campaign of fraudulent e-mails impersonating the Tax Agency in order to disseminate information about the taxpayer's rights. malware and which is identified as a recurrent campaignThe sender and subject matter generally vary depending on the campaign.

In this campaign, the subject line of the email is: "Comprobante Fiscal. - id 81690024". In the body of the message, the user is asked to download a PDF file, indicating that it is the tax receipt attached to the email. We should also note that it is dated 2020, from which it could be deduced that you have forwarded a previous campaign without bothering to change the message.

This annex pretends to be a PDF, but in reality it is a link that redirects the user to a web page where he/she will download the malware. The name of the malicious file has a random name, although it follows the same pattern: "13 random numbers + _ + 3 random letters".

en_GB