Date: Thu, 22 Feb 2012 11:29:29 +0100
From: "Guadalupe Kessler"
Subject: Fraudulent tax return assistance accusations.
You're receiving this message as a Certified Public Accountant and a member of AICPA.
Having trouble reading this email? View it in your browser.
Termination of CPA license due to income tax fraud allegations
Valued accountant officer,
We have received a complaint about your alleged participation in income tax infringement for one of your employers. According to AICPA Bylaw Subsection 765 your Certified Public Accountant license can be cancelled in case of the event of presenting of a incorrect or fraudulent tax return for your client or employer.
Please be notified below and respond to it within 21 days. The failure to respond within this term will result in cancellation of your Accountant license.
The American Institute of Certified Public Accountants.
The malicious payload is at srsopen.net/main.php?page=78581944265196f1 , as usual the first step is a legitimate hacked site. srsopen.net is hosted on two familiar IP addresses, 220.127.116.11 and 18.104.22.168 most recently seen here.