Recently we received mail as below.
This is a fake “IRS Notification”. As said in the mail it asks user to fill the form shown as shown below.
We have been seeing many such fake notifications mails containing attachment as “IRS document.zip” After analysis we found it is connecting to random IPs.
Later it downloads and installs other malwares. Quick Heal detects “IRS document.zip” as TrojanDownloader.Deliver.lj
We recommend users not to respond such emails.
Leave a reply
