in Meddling

Scam email: Federal Tax payment canceled

Got another scam email, this time purporting to be from the IRS. There’s a handy executable file which will not provide you the details but instead infect your computer with a virus. Beware!

Received: from 66.141.broadband10.iol.cz (66.141.broadband10.iol.cz [90.177.141.66])
by eddy.neusemedia.com (Postfix) with ESMTP id 319388AE824
for ; Wed, 22 Jun 2011 08:05:45 -0400 (EDT)
Received: from [130.104.251.35] (account practisingfu@travidia.com HELO lhisllbqq.epevnviqxbl.va)
by 66.141.broadband10.iol.cz (CommuniGate Pro SMTP 5.2.3)
with ESMTPA id 072829134 for me; Wed, 22 Jun 2011 23:05:47 +1100
Date: Wed, 22 Jun 2011 23:05:47 +1100
From: Eloy_Todd@irs.gov
X-Mailer: The Bat! (v2.10.01) Educational
X-Priority: 3 (Normal)
Message-ID: 9846395078.17E5RC9W861799@mvnus.ertqklybgfajqyk.info
To: Mark Turner
Subject: Federal Tax payment canceled

Internal Revenue Service United States Department of the Treasury

Your Tax payment (ID: 40459362352125), recently initiated from your bank account was returned by the The Electronic Federal Tax Payment System.

Rejected Tax transfer
Tax Transaction ID: 40459362352125
Return Reason See details in the report below
FederalTax Transaction Report tax_report_40459362352125.pdf.exe (self-extracting archive, Adobe PDF)

Internal Revenue Service, Metro Plex 1, 8401 Corporate Drive, Suite 300, Landover, MD 20785