We had call from Official Intuit number lead us to that fake download. It's the only call that day in the call log.
