Phishers send email posing as IRS tax refund

[regic]

Link to legitimate government website bounces you into the hands of phishers

Experts at SophosLabs,... have warned internet users of a phishing email which aims to steal from American taxpayers by posing as notification of a refund from the Internal Revenue Service (IRS). The phishers are taking advantage of a security configuration error on the real US Government website which is allowing phishers to redirect visitors to a bogus website.

In an attempt to look more legitimate, the email tells users to cut-and-paste the link into their web browser rather than click directly on it. Although the link does use the genuine domain name of a real government website (www.govbenefits.gov), a mistake in the way the website has been set up bounces surfers to a bogus site run by the phishers...

full article and copies of the emails: http://www.theregister.co.uk/2005/11/30/...hing_scam/