The Internal Revenue Service (IRS) is warning of ongoing phishing attacks impersonating the IRS and targeting educational institutions. The attacks use tax refund payment baits and mainly focus on universities’ staff and students with email addresses. Researchers who spotted these attacks in the wild earlier this month said that they bypassed Office 365 security and landed in the mailboxes of between 5,000 and 50,000 targets. The phishing emails appear to target university and college students from both public and private, profit and non-profit institutions.
Source: https://www.bleepingcomputer.com/news/security/scammers-target-universities-in-ongoing-irs-phishing-attacks/