strange new spam (1 Viewer)

[taubstumm]

just got eight copies of the same email, apparently sent from ioncam.seirbhise at revenue.ie:

E-mail Fogra #2011-27741NIE

A chara Iarratasóir:

Táimid tar éis deara go bhfuil tú i dteideal aisíoc mhéid 361,43
Comhlánaigh an t-aisíoc cánach le 24h: Aisíoc Cánach Foirm 2011

Go raibh maith agat,
Na Coimisinéirí Ioncaim na héireann

i tried to 'read' this, with my leaving-cert gaeilge, gave up, went to google translate:

Dear Applicant:

We have detected that you are entitled to a refund amount 361.43
Complete the tax refund 24h: Tax Return Form 2011

Thanks,
Irish Revenue

then there's a link to a clearly nasty malware/virus site.

obvious trick, but very weird that they'd go to the trouble of doing it in irish.

anyone got anything similar? has revenue.ie been hacked by the russian mafia?

 

[maims bond]

Got the same email at work. I was surprised it was in Irish as well. A revenue scam about a refund has been doing the rounds for a while, in the King's though.

 

[RED(tape)MENACE]

It's not actually sent from revenue.ie though, the sender is faked.
We've had to block it by the email subject here.
Another subject being used is "2011/28719266428 REVENUE"

 

[Carlow Punks!]

it could be the Conne-Nóstraí, the Connemara Mafia?

 

[Theseus Mock]

The funny thing about this spear phishing attempt whilst masquerading as {state} organisation is that the spammers think we all get mailouts in Irish. I suspect they're scraping .ie domains or they have indeed hacked the revenue, anything possible nowadays.