Avanan's research into non-traditional tax scams was featured in Threatpost. Avanan found scammers spoofing fintech apps like Stash and Public. As they write:
The email includes a link to a document – purportedly associated with the person’s Stash or Public account – and invites users to use the link to log in to their accounts to access it. When the user clicks on the link, however, they are directed not to a legitimate log-in site, but to one that harvests their credentials.
Read the entire report here.