New Phishing Attack Emerges Targeting ADP Users Wanting Their W2

Happy young couple calculating bills at homeFor those looking to get their taxes done early, watch out for emails impersonating ADP offering a link to retrieve your W2 early!

While everyone pretty much hates taxes, obtaining all your necessary paperwork is something most want to take care of well-ahead of tax time. A new phishing attack purports to be ADP – one of the world’s largest HR and Payroll companies – telling you your W2 is ready!

12-24-19 Image

Source: AppRiver

While your organization may not be using ADP for payroll, this phishing attack is taking more the shotgun approach by impersonating an organization that a material percentage of their potential victims use.

This particular attack brings users to a spoofed ADP logon page, where victims can enter in their ADP credentials. Attackers can then leverage these credentials to log in as the user and change bank accounts for direct deposit. They can also gain access to personal information including: birthdate, address, social security number, phone number and more – all to be nefariously used as part of another identity theft scam.

Users that have been educated with Security Awareness Training know to look for suspicious details that don’t align – such as a bogus email “from” domain, or the URL the email links to not being anything close to “”. By validating these bits of information before clicking on a link or attachment will make the difference between becoming a victim and avoiding a very costly mistake.

Free Phishing Security Test

Would your users fall for convincing phishing attacks? Take the first step now and find out before bad actors do. Plus, see how you stack up against your peers with phishing Industry Benchmarks. The Phish-prone percentage is usually higher than you expect and is great ammo to get budget.

PST ResultsHere's how it works:

  • Immediately start your test for up to 100 users (no need to talk to anyone)
  • Select from 20+ languages and customize the phishing test template based on your environment
  • Choose the landing page your users see after they click
  • Show users which red flags they missed, or a 404 page
  • Get a PDF emailed to you in 24 hours with your Phish-prone % and charts to share with management
  • See how your organization compares to others in your industry

Go Phishing Now!

PS: Don't like to click on redirected buttons? Cut & Paste this link in your browser:

Subscribe to Our Blog

Comprehensive Anti-Phishing Guide

Get the latest about social engineering

Subscribe to CyberheistNews