The emails have a subject line: "Security Awareness for Tax Professionals." The "From" line is "Your e-Services Team" and carries IRS and e-services logos that hyperlink to a phishing site that poses as an e-services registration page.
E-services users who have already clicked on the fake logo and provided their username and password should contact the e-services help desk to reset their accounts. If the same password is used for other accounts, these should also be changed.
Users should also perform a deep security scan on their computers, re-evaluate their security controls and be alert to any other signs of identity theft or data compromise.
The phony email claims information was stolen from certain user accounts in 2015 from a state-sponsored actor and requests users upgrade accounts.Last modified on Monday, 07 November 2016