Hello guys, i received an IRS scam email. Here are the contents:
Attached to the email is a htm file.
Clicking on one of the login tabs brings up a fake iframe with a phishing login. This is one of the examples:
I had a look at the code behind it and found where all the data is being sent.
the url is https://appsavio.com/wp-admin/network/.../book.php