Security News > 2020 > October > IRS COVID-19 Relief Payment Deadlines Anchor Convincing Phish

A credential-phishing email campaign is making the rounds, using the lure of coronavirus tax relief to scam people into giving up their personal information.

The emails purport to contain an important document about COVID-19 relief funds from the IRS. Clicking the link in the email leads readers to a SharePoint form that they were told to complete before accessing the document, according to Chetan Anand, co-founder and architect at Armorblox.

The email subject line read "IRS Covid Relief Fund Update," and the sender name was "IRS Covid Relief Funds."

"A closer look reveals some grammatical irregularities in the email, as well as a non-capitalized 'Irs' in the email sender name, both of which can be red flags to anyone who stops and reads the email closely," he noted.

"Whenever possible, engage with emails related to money and data in a rational manner. Subject the email to an eye test that includes inspecting the sender name, sender email address, language within the email, and any logical inconsistencies within the email."

News URL

https://threatpost.com/irs-covid-impact-payment-deadlines-phish/159913/