The attachment may contain malware that allows the thief to track keystrokes and eventually steal passwords or take over control of the computer systems.
The communication, which has the subject "Verifying your EFIN before e-filing", claims the IRS is requiring all efile originators to provide the information before the transmit returns. That means we need your EFIN (e-file identification number) verification and Driver's license before you e-file,” according to the message in the email.
It asks for a PDF copy or image of EFIN acceptance letters (5880c), dated within the last 12 months or a copy of the IRS EFIN Application Summary from a preparer’s e-Services account at IRS.gov, along with copies of the front and back of the person’s driver’s license.