New Scam For Self-Employed Workers: The False Invoice From The Tax Agency


Scam: As if self-employed life in Spain was not exciting enough in itself, above all, we must be aware of scams and scams aimed at this long-suffering and suffering group. Scams such as the one discovered by the INCIBE (National Cybersecurity Institute) in the form of a campaign to send fraudulent emails that impersonate the Tax Agency to spread malware.

The false email from the Tax Agency

The identified campaign has the subject of the email: ‘Urgent Notification’, and in the body of the message the user is asked to download a PDF file indicating that it is the digital tax receipt attached to the email. According to INCIBE, the mail contains a .zip that attaches two files, an .exe and a .vbs. The latter downloads a new .vbs file, which downloads a malware called TrojanDownloader: VBS / Agent.EH., Which “will take care of downloading and executing malicious files.”

In this way, and if they are successful, “cybercriminals could steal confidential information from the infected computer or carry out malicious actions.” But there is a way to identify that they are trying to sneak it in, since if you look at the body of the message you can see “multiple grammatical and spelling errors along with other inconsistencies.”

A scam targeting freelancers

Once the attached link has been clicked, the browser opens to download the malicious file. The downloaded file contains the malware, which could be detected by some browsers as a malicious file and “notifying the user”.

Remember that if you receive a notification from the Tax Agency or another government body, you must access through the electronic headquarters to check the notifications or notices that they send you, never through the link contained in the body of the message. And the same without are communications from your bank.