Threat actors are using a combination of scams to obtain as well as buy and sell credentials for U.S. taxpayers to steal appropriations from the COVID-19 relief package and 2020 tax refunds. Researchers observed a flurry of activity on hacker forums that deal in various versions of taxpayer fraud related to CARES Act relief payouts and tax refunds, they said. Researchers also observed bad actors selling data packages to simplify tax identity theft and stolen databases from tax e-filing services of fullz and taxpayer account information.
Source: https://threatpost.com/hackers-dumpster-dive-covid-19-relief-scams/155537/