BleepingComputer.com: Phishing Alert: Internal Revenue Service

Websense® Security Labs™ has received reports of a new phishing attack that targets American taxpayers and claims to be the Internal Revenue Service. Users receive a spoofed email message, which claims they may access and track their tax refund information online. Upon clicking the link in the email, users are taken to a fraudulent website. The fraudulent website prompts users for their first and last name, social security number, mailing and email address, credit card number, CVV2, and ATM pin.