New IRS Phishing Scam Uses Fake Notices to Steal Microsoft 365 Credentials

New IRS Phishing Scam Uses Fake Notices to Steal Microsoft 365 Credentials

Scammers use an “overdue tax bill” along with a sophisticated and obfuscated javascript-based “invoice” attachment to identify targeted victims, validate credentials, and transmit them within seconds.