Home Malware Programs Adware 'Employee Retention Credit' Email Virus

'Employee Retention Credit' Email Virus

Posted: April 1, 2021

The 'Employee Retention Credit' email virus is a new spam email that targets American citizens. The fraudulent message claims to come from the IRS (Internal Revenue Service,) and it tells recipients that they need to review the renewed taxation policies in light of the COVID-19 pandemic. The messages go on to warn them that the attached file must be reviewed on their PCs due to security measures. The file is a '.xlsb' document, which may sound like a legitimate spreadsheet but, in reality, it packs a threatening piece of code designed to deploy and execute a hidden file. Cybersecurity experts have been able to analyze the 'Employee Retention Credit' email virus payload, and it appears to be a copy of the TrickBot banking Trojan.

What makes the 'Employee Retention Credit' email virus campaign threatening is that it mentions a real IRS policy, the Employee Retention Credit. This might leave some users under the impression that they аre seeing a legitimate message, which contains information about a recent policy. You can rest assured that the IRS would not contact you via random emails to provide you with such updates.

If you see a message about the 'Employee Retention Credit' in your email inbox, then you should know that it probably contains a threatening payload that you must not interact with. The best thing to do is to report the sender and delete the message entirely. You also can prevent such files from reaching your hard drive by using a regularly updated anti-virus application.

Loading...