September 15th US taxpayers should file their US tax return, an event that did not escape unnoticed by cybercriminals. The link does not lead to the agency portal, but to a Web-based page that mimics an on-line form. The page also provides a link of a purported tax statement that the user should download and execute. However, upon clicking the user does not download an e-form, but receives a malicious payload that BitDefender defines as Trojan.Generic.2436384. This Trojan is, in effect, another version of the infamous ZBot.”]
Source: https://www.bitdefender.com/blog/hotforsecurity/fake-irs-notice-of-underreported-income/