May 15, 2020
This particular COVID-19 Stimulus attack purports to be from the Internal Revenue Service (IRS). The email itself is fairly simple and spoofs the recipient’s domain in hopes the company has allowed its own domain name in their email gateway but uses “IRS” as the display name. It tells the recipient “We encountered difficulties delivering your Covid-19 Stimulus Check to your home address above. You provided a wrong address.”
Our partner, AppRiver, quickly analyzed multiple versions of this attack and they all used the same address, no matter who received the message. A quick Google search shows it belongs to a legitimate pizza shop but not associated in any way with the recipients.
Read more about this scam, IRS guidance, official IRS & taxpayer service websites, and more: https://bit.ly/2Z6JgNL
Posted by Jason Casteel, IT Services Manager