Back to All Attacks
Attack Details
Attack Date:
Mar 22, 2022

IRS Overdue Payment BEC Attack

Initial Email Content

Subject
Balance Due Reminder Notice
Body

IMPORTANT NOTICE:

We are required to send you this notice to inform you that you have unpaid taxes.

Please reply back so we can send you a statement and to resolve your tax account.


This email was sent by: Internal Revenue Service (IRS) · Internal Revenue Service · 1111 Constitution Ave. N.W. · Washington DC 20535

Attack Screenshots

No items found.

Malicious Artifacts

Additional Indicators of Compromise

Type

Description

No items found.

Attack Description

This text-based BEC attack impersonates the IRS using a look-alike domain and an overdue payment theme to request a fraudulent payment.

Analysis Overview

Tactic
Look-alike Domain
Goal
Payment Fraud
Impersonated Party
External Party - Other
Vector
Text-based
Theme
Overdue Payment
Language