IRS now paying company that muffed HealthCare.gov work

(RELATED: BOMBSHELL: IRS Has Active Contract For MILLIONS With Company HHS FIRED Over Botched Healthcare.gov). “Committee staff is looking into the matter,” Chaffetz said in an email to The Daily Caller. An official 

It is important to note this contractor does not run or operate IRS.gov or the ACA web pages on the site. "The IRS also notes that the awarding of contracts and decisions to extend contracts is based on documented facts and federal procurement rules

We blocked all of them, even the first one, with our financial phishing filters which detect fake emails from banks, IRS, Paypal, ebay and other organizations that are often the subject of phishing scams. We blocked it based on header info mismatch (sending IP is not IRS) and also added The envelope (or SMTP) sender is not @irs.gov, so you might be seeing a different campaign. Ted Green, our President and co-designer of SpamStopsHere, wanted me to add this 

Got an e-mail from john.smith @ mail-irs.gov stating that i incorrectly filled out my tax return. Seeing as how I didn't yet fill out my tax return, I know this is foney. Message contains a link to a page at mindstormstudio(dot)ro.

It also drops a file (in this case called FbIpg60.exe) which has another low detection rate of just 2/57. Fake IRS spam is quite common, if you don't deal with the IRS then blocking mail-irs.gov on your email gateway might help.