The 'SneakyLog' Alert: Tax-Themed Phishing Hitting Reno Payroll

Even after the tax deadline, the Reno Police Department reports a surge in “tail-end” scams targeting local payroll and HR departments. These attacks specifically aim to harvest employee records and W-2 data.

The Anatomy of the Attack

• The Lure: Highly professional emails with subjects like “Urgent: 2025 Employee Tax Correction” or “Download Your Form 1099-R.”
• The Tactic: These emails often bypass traditional filters by using QR codes instead of links. When scanned, they lead to the SneakyLog (Kratos) phishing platform.
• The Goal: The landing page perfectly mimics a Microsoft 365 or Google Workspace login. Once your employee enters their credentials, the attackers gain full access to your corporate environment.

How to Protect Your Firm

1. Verify via Internal Channels: Employees should never click tax links. Instead, they should log in directly through your company’s official payroll portal (e.g., ADP, Gusto).
2. MFA is Mandatory: Ensure Multi-Factor Authentication is active. Even if a password is stolen via SneakyLog, MFA provides a critical second line of defense.
3. Local Reporting: If your business is targeted, report it to the Washoe County Sheriff’s Office to help alert other local business owners.

High Sierra Cyber’s simulation training includes these specific “Tax-Season” lures to train your team in a safe, controlled environment. Find out how our cybersecurity awareness training and phishing simulations can protect your business year-round, get in touch to get started.