Scammers are sending physical letters to cryptocurrency holders that copy the look of official IRS notices. The letters tell recipients they must enroll in something called a Digital Asset Compliance Portal before a deadline, or risk penalties. “If you receive a letter claiming to be from the IRS that instructs you to enroll in a Digital Asset Compliance Portal, don’t respond. The IRS did not send it. The IRS does not operate a Digital Asset … More →
The post Fake IRS letters direct crypto holders to bogus compliance portal appeared first on Help Net Security.

ChocoShell Steals Microsoft 365 Tokens and Browser Sessions From Travelers
ChocoShell is a PowerShell-based infostealer used in Microsoft’s newly disclosed “CaptiveCrunch” campaign to steal Microsoft 365 tokens, browser sessions, and Wi‑Fi credentials from travelers connecting


