The IRS is warning taxpayers about a phishing campaign in which threat actors are masquerading as IRS agents. The scammers are distributing emails made to look like official IRS messages. Recipients are urged to click on a malicious link in order to download documents with information about their tax refunds. The emails also contain temporary passwords that taxpayers can use to access the files. However, those files actually contain malware that can enable attackers to take over victim’s computers and steal their personal data.
The threat actors have registered dozens of fake websites, which makes it difficult for authorities to shut down the operation. The IRS says it will never request personal or financial information from taxpayers via email, SMS or social media.
Read more: IRS Warns of New Imposter Scam That Spreads Malware
