Criminals Are Selling Stolen Tax Forms for Cheap on the Dark Web

Malwarebytes warns that cybercriminals are selling stolen tax documents and personally identifiable information (PII) — with records priced as low as $4 and freshly stolen forms around $20 — enabling large-scale tax refund fraud. The report highlights an ecosystem including initial access brokers auctioning access to compromised CPAs and accounting firms, and fraud-as-a-service offerings that supply forged documents and tutorials. Malwarebytes recommends filing taxes early, protecting SSNs, watching for phishing, using strong unique passwords, monitoring accounts/credit reports, and considering an IRS Identity Protection PIN (IP PIN).