Ransomware protection: Active monitoring for ransomware threats acting to encrypt your files.Silent detection mode: Get protection without being disturbed.Taxpayers who have clicked on a link or downloaded an attachment from a suspicious email should immediately contact their IT department or a reputable cybersecurity firm for assistance. The agency only communicates with taxpayers through traditional mail delivered by the United States Postal Service, or through secure online accounts on its official website, IRS.gov. On the other hand, the IRS recommends that recipients do not click on any links or download any attachments in such emails, and instead forward them to the IRS at IRS has reminded taxpayers that it does not initiate contact with taxpayers via email, text messages, or social media channels. The researchers advise taxpayers to be cautious of unsolicited emails, especially those that request personal information or contain suspicious links or attachments. It has been used to distribute other malware strains such as TrickBot and Ryuk ransomware, which have caused significant damage to organizations around the world. The Emotet malware has been active since 2014 and is known for its ability to evade detection and spread rapidly. The latest IRS tax malspam scam should not come as a surprise, as malicious Microsoft document files were found to be responsible for 43% of all malware downloads in 2021. It is also worth noting that users should also beware of emails that contain subject lines like “Tax Payment Request” or “Automatic Income Tax Reminder” which instruct the recipient to download a Microsoft document file to review and confirm their personal details. Moreover, the malicious Microsoft Word document is 500MB in size, which alone should stand as the biggest indicator that something is wrong with the downloaded file. Once the malware is installed, it can steal sensitive information such as login credentials, financial data, and personally identifiable information.

However, the attachment is actually a malicious payload that installs the Emotet malware onto the victim’s device if Marcos is enabled. The malicious email (Credit: Malwarebytes)

Is malwarebytes legitimate