A sophisticated new phishing campaign is targeting unsuspecting Americans by impersonating the Social Security Administration, security researchers warn.
According to a recent report from Malwarebytes Labs, hackers are sending fraudulent emails claiming to contain Social Security statements that, when opened, give scammers complete remote access to victims’ computers.
Unlike cruder scams that are easily spotted, this attack uses several techniques that make it particularly dangerous for even cautious users.
How the scam operates
The attack begins with an email that appears to be from the Social Security Administration with a simple message: “Your Social Security Statement is now available.” Recipients are prompted to download what looks like an official document.
But that innocent-looking attachment isn’t your statement at all. It’s a ScreenConnect client installation file.
Once executed, this legitimate remote support tool grants hackers the same level of control over your computer that an IT professional would have when troubleshooting technical problems.
With this unrestricted access, scammers can:
- Install malicious software
- Access and steal sensitive files
- Monitor your online banking activities
- Capture passwords and login information
- Transfer money from financial accounts
- Collect personal data for identity theft
Why this scam is particularly effective
According to Malwarebytes, this attack is the work of a sophisticated phishing group known as Molatori. What makes their approach especially dangerous is how it bypasses common security measures.
The phishing emails are sent from compromised WordPress websites with legitimate domain names, helping them slip past spam filters.
The scammers sometimes even send the email content as an image rather than text, preventing security tools from scanning for suspicious wording.
While the primary motivation appears to be financial fraud, the stolen data could be sold to other criminal groups or used for identity theft.
Cyber scams like this don’t just threaten your data — they can drain your finances, too. Struggling with payments in retirement? A reverse mortgage can turn your home equity into tax-free cash for seniors 62+, no house sale required. Use the funds for medical bills, home repairs, or even that dream vacation—without monthly payments!
Protecting yourself from Social Security scams
To avoid falling victim to this and similar scams, take these precautions:
- Never download attachments from unsolicited emails, even if they appear to come from government agencies.
- Access your Social Security information directly through the official SSA website (ssa.gov).
- Be particularly suspicious of any email asking you to download files.
- If uncertain about an email’s legitimacy, search for phrases from the message online to see if they’re associated with known scams.
- Keep security software updated on all devices.
This isn’t the first time scammers have impersonated the Social Security Administration. Last month, the Office of the Inspector General issued an alert about fraudulent emails containing links to fake SSA websites.
The bottom line is that your Social Security statement will never arrive as an attachment that needs to be downloaded. When in doubt, go directly to the source by logging into your my Social Security account at ssa.gov.
Scammers target your inbox — and your wallet. If you’re still overpaying for essentials like phone service, it’s time to cut costs. Paying more than $15 a month for your cell service? Stop that. Click here to save a bundle.
Add a Comment