Scripts:Notice of Deficiency

From SERepository

Summary:

This attack notifies victims that they have a tax deficiency and must download relevant documents.

Description:

Department of the Treasury Date of this Notice: [Date] Internal Revenue Service Letter Number 123(DO) District Director Form: 1040

[Victim] [Company Name] (555) 555-0123

-NOTICE OF DEFICIENCY-

Dear [Victim], We have determined that you owe additional tax and other amounts, or both, for the tax year(s) identified above. This letter is your NOTICE OF DEFICIENCY, as required by law. The enclosed statement shows how we figured the deficiency.

If you want to contest this determination in court before making any payment, you have 90 days from the date of this letter (150 days if addressed outside the United States) to file a petition with the United States Tax Court for a redetermination of the deficiency.

Please click here to download a Copy of the Order, Letter, Notice and Other Document Being Appealed(Link to malware-<_http://www.tax-revenue.com/ViewCase.php?nr=53-22925-694481-920>)

If you decide not to sign and return the waiver, and you do not file a petition with the Tax Court within the time limit, the law requires us to assess and bill you for the deficiency after 90 days from the date of this letter (150 days if this letter is addressed to you outside the United States).

Thank you for your cooperation.

Sincerely yours, [Fake Name]

Commissioner by [Fake Name 2] CR District Director

Letter 123(DO)(Rev.9-96)

Prevention:

• User awareness
• There are antivirus signatures for common payloads
• Do not allow users to run Active X Controls
• Block site tax-revenue.com and other malicious sites

References:

http://www.bsu.edu/ucs/article/0,1370,6276-1932-58702,00.html

http://www.k-state.edu/infotech/security/scams/IRSemail.html

Stats: Submit Statistics

Contributor: