Zeus strikes again!

http://blogs.ft.com/techblog/2010/10/major-tax-phishing-attack-shows-resilience-of-zeus/

 

This is a variation on similar scams, such as this from last year:

ATM PAYMENT DEPARTMENT(PAYMENT NOTIFICATION)
http://keepsafeonthenet.co.uk/2009/02/atm-payment-departmentpayment-notification/

In the current scam, protection certainly begins with the user, since one who does e-filing would have seen this on the IRS web site:

http://www.irs.gov/privacy/article/0,,id=179820,00.html?portlet=1

Back to the Zeus article:

Zeus is a trojan, and Security personnel in Enterprise systems, to which this exploit is targeted, can be faulted for not having their systems adequately protected from intrusion of executables via remote code execution exploits.

Same old problem in a different guise, same old tried and true solutions available.

----
rich