Initial Email Content
Subject
Balance Due Reminder Notice
Body
IMPORTANT NOTICE:
We are required to send you this notice to inform you that you have unpaid taxes.
Please reply back so we can send you a statement and to resolve your tax account.
This email was sent by: Internal Revenue Service (IRS) · Internal Revenue Service · 1111 Constitution Ave. N.W. · Washington DC 20535
Malicious Artifacts
Additional Indicators of Compromise
Type
Description
No items found.
Attack Description
This text-based BEC attack impersonates the IRS using a look-alike domain and an overdue payment theme to request a fraudulent payment.
Analysis Overview
Tactic
Look-alike Domain
Goal
Payment Fraud
Impersonated Party
External Party - Other
Vector
Text-based
Theme
Overdue Payment
Language