Canada Revenue Agency Phishing Web Site
Threat Type: Phishing Alert
Websense® Security Labs™ ThreatSeeker™ Network has discovered phishing sites spoofing the Web site belonging to Canada Revenue Agency (CRA), the Canadian government’s taxation authority. The fake site is hosted in Germany and uses the same stylesheet and graphics as the real CRA Web site.
The phishing site aims to collect personal information such as the victim’s social insurance number, full name, address, date of birth, mother’s maiden name, and credit card information. Upon submitting the data, the user is redirected to the real CRA site.
This campaign is timed to coincide with the upcoming CRA deadline for online tax return applications. We have also tweeted this discovery earlier here.
Screenshots of the phishing site:
Websense Messaging and Websense Web Security customers are protected against these threats.