Use these tips to stay safe online during everyone’s least-favorite time of the year.

‘Tis the season — the season … or should we say the and risk season? While you might be concerned about preparing your taxes correctly, you should also be concerned about preparing them safely. While online filing is on the increase, there also has been an increase in and online filings being attacked. You and preparers need to be vigilant in the pursuit of fraud and do as much as reasonably possible to understand how attackers are looking to take advantage and then apply appropriate actions.

Using high-level tools and tactics, cybercriminals can access information in your tax filings in the following ways.

  • Compromised account: Attackers can crack or leverage a compromised password and gain access to your online account. This is a common tactic. In fact, 81% of breaches leverage a compromised credential, according to Verizon’s 2017 Data Breach Investigations Report.
  • Account fraud: Attackers register for a new account with socially engineered information and act as you.
  • Account takeover: Attackers gain access to your email and then initiate a password reset to change the password to your account, essentially gaining access and locking you out.  

We recently looked at the from a large tax preparer’s authentication attempts in a 30-day period during the 2016 tax season. Out of over 1 million user access attempts, more than 13,600 were either denied access or were asked for additional authentication to provide further proof of identity due to a high-risk score. That 1.3% of all access attempts were suspicious or malicious.

Sixty days into the 2017 tax season, that same preparer had 1.5 million user authentication attempts with more than 28,700 of them being either denied access or asked for more authentication. That is, of all access attempts, nearly 2% were deemed suspicious or malicious, and were handled effectively.

If this tax preparer hadn’t used an access management service, this 1% to 2% of suspicious or malicious activity could have gone undetected for weeks, and at best discovered only after some attacker-based activity took place.

So, what can you do to yourself? Here are tips to stay safe online during the tax season:

1. Enable multifactor authentication. More and more tax services are offering, at a minimum, two-factor authentication. Where possible, utilize additional authentication log-in options. If you’re using tax preparers, ask them how they intend on protecting your information. If they can’t answer, you might want to consider having your taxes prepared by someone else.

2. Best password practice. If your preparers don’t offer seamless multifactor authentication protection and you still decide to do business with them, make sure you have a strong password that is unique and includes numbers and symbols — and never use it across multiple sites or accounts.

3. Don’t be fooled by phishing emails. Ever receive suspicious emails asking for personal information or offering an outrageous discount or tax refund? Never open them without doing a basic authenticity check. If it seems too good to be true, it probably is.

4. Be wary of public Wi-Fi. Cybercriminals can easily see individuals’ information on public Wi-Fi networks. Avoid inputting financial or sensitive personal information when connected to a public hotspot. Wait until you’re at home or on a trusted network. 

5. Keep up to date. Keeping systems patched and updated ensures the best chance of known issues. This is true for the operating system, software, and additional resources such as home . This also includes cellphones and tablets and anything else you might use to prepare and file tax documents.

Related Content:

 

Interop ITX 2018  -  7Bc4ea0bb7 059e 4ef6 a860 71a7f500d0da 7D InteropITX18 Logo HorizDates Color383 - Protect Yourself from Online Fraud This Tax Season

Join Dark Reading LIVE for two summits at Interop ITX. Learn from the industry’s most knowledgeable IT security experts. Check out the security track here. Register with Promo Code DR200 and save $200.

As Senior VP of Identity Strategy at SecureAuth and Core Security, Robert Block is responsible for executing strategic vision of preventing the misuse of stolen credentials. Block has over 19 years of IT experience — of which 15 years have been focused on identity and … View Full Bio

More Insights



Source link

LEAVE A REPLY

Please enter your comment!
Please enter your name here