Bad Actors Trying to Capitalize on Current Events via Shameless Email Scams

This attack starts with an IRS impersonation email that contains a ZIP attachment called “W-9 form.zip”. The email is sent to the target, and a password is provided within the body of the email for convenient extraction.