The National Police warns of a new mail scam in which they pose as Social Security

The National Police warns of a new mail scam in which they pretend to be Social Security. The deception comes from an email in which they pose as Social Security in which they encourage you to download a form.

The typical message says “Dear taxpayer. Social Security: informs you that there are obligations, Product of a Tax Settlement that is unpaid. You can download the report generated by the SII at the following link.

In this case, cybercriminals use non-payment of a tax assessment as a hook. To solve the problem, they request that the person who has received the message click on a link to download, supposedly, a report from the organization2. At that moment, a malicious file is downloaded.

By clicking on the ‘Download report’ link, a .zip compressed file is downloaded, which is named ‘TaxpayerXXXXXXXX.zip’ (where the XXXXXX appears a succession of numbers that can vary). By the time the file is executed, the device will have been infected with a Trojan horse that could carry out various fraudulent processes*.

However, there are some signs that can alert you to a scam. For example, misspellings that can be seen in the text. Although the most obvious thing is that the email address does not come from an official source.