IRS Warns of New Email Scam

["US-CERT" <US-CERT () ncas us-cert gov>]

Cybersecurity and Infrastructure Security Agency Logo

National Cyber Awareness System:



IRS Warns of New Email Scam [ https://www.us-cert.gov/ncas/current-activity/2019/08/23/irs-warns-new-email-scam ] 
08/23/2019 02:26 PM EDT 
Original release date: August 23, 2019

The Internal Revenue Service (IRS) has issued a warning about a new email scam in which malicious cyber actors send 
unsolicited emails to taxpayers from fake (i.e., spoofed) IRS email addresses. The emails contain a link to a spoofed 
IRS.gov website that displays fake details about the targeted recipients tax refund, return, or account. The emails 
instruct the recipient to access their refund information by entering a provided password on the spoofed website. By 
entering the password, the victim unintentionally downloads malware that could enable the malicious cyber actors to 
take control of the affected system or obtain sensitive information.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the IRS news 
release [ 
https://www.irs.gov/newsroom/security-summit-warns-of-new-irs-impersonation-email-scam-reminds-taxpayers-the-irs-does-not-send-unsolicited-emails
 ] and the CISA Tip on Avoiding Social Engineering and Phishing Attacks [ https://www.us-cert.gov/ncas/tips/ST04-014 ] 
for more information.

This product is provided subject to this Notification [ https://www.us-cert.gov/privacy/notification ] and this Privacy 
& Use [ https://www.dhs.gov/privacy-policy ] policy.

body { font-size: 1em; font-family: Arial, Verdana, sans-serif; font-weight: normal; font-style: normal; color: 
#333333; } ________________________________________________________________________

A copy of this publication is available at www.us-cert.gov [ https://www.us-cert.gov ]. If you need help or have 
questions, please send an email to info () us-cert gov. Do not reply to this message since this email was sent from a 
notification-only address that is not monitored. To ensure you receive future US-CERT products, please add US-CERT () 
ncas us-cert gov to your address book. 

OTHER RESOURCES: Contact Us [ http://www.us-cert.gov/contact-us/ ] | Security Publications [ 
http://www.us-cert.gov/security-publications ] | Alerts and Tips [ http://www.us-cert.gov/ncas ] | Related Resources [ 
http://www.us-cert.gov/related-resources ]  

STAY CONNECTED: Sign up for email updates [ http://public.govdelivery.com/accounts/USDHSUSCERT/subscriber/new ]