The IRS Security Summit issued a warning to tax professionals about a new e-mail scam by cybercriminals posing as potential clients. Scammers are sending phishing e-mails in two parts, beginning with a standard solicitation for services followed by a second email with an embedded web address or PDF attachment with an embedded web address. When the tax professional thinks they are accessing a new client’s tax information, in reality they are opening up their system for the scammer to collect personal information for illegitimate use.
Read more on the IRS website: https://www.irs.gov/uac/newsroom/security-summit-alert-new-two-stage-email-scheme-targets-tax-professionals