Get Transcript PART_OF irs.gov
Get Transcript was introduced as a feature of the irs.gov website.
Explicit Direction flagged Confidence 99% · Jack Rhysider EP 26 Details
“they made a new feature to irs.gov website called Get Transcript”
Software
software:get_transcript
Also: Get Transfer
IRS website feature that allowed users to retrieve prior tax records and was abused by fraudsters.
IRS website feature that allowed users to retrieve prior tax records and was abused by fraudsters.
“they made a new feature to irs.gov website called Get Transcript”
“The thieves successfully used the Get Transcript feature of the irs.gov website”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | PART_OF | irs.gov | Explicit | 26 |
| incoming | INVOLVES | IRS Get Transcript breach | Explicit | 26 |
| incoming | INITIAL_ACCESS_VIA | IRS Get Transcript breach | Explicit | 26 |
| incoming | USES | Identity Protection Personal Identification Number | Explicit | 26 |
| incoming | USES | Kazeem | Explicit | 26 |
Get Transcript PART_OF irs.gov
Get Transcript was introduced as a feature of the irs.gov website.
Explicit Direction flagged Confidence 99% · Jack Rhysider EP 26 Details
“they made a new feature to irs.gov website called Get Transcript”
IRS Get Transcript breach INVOLVES Get Transcript
The IRS breach involved attackers using the Get Transcript feature to obtain taxpayer records.
Explicit Confidence 99% · Jack Rhysider EP 26 Details
“The thieves successfully used the Get Transcript feature of the irs.gov website to obtain the tax records of 100,000 people.”
IRS Get Transcript breach INITIAL_ACCESS_VIA Get Transcript
The attackers initially accessed taxpayer information by navigating through the Get Transcript authentication process.
Explicit Confidence 96% · Jack Rhysider EP 26 Details
“They simply found a way to navigate through the authentication system”
Identity Protection Personal Identification Number USES Get Transcript
The IRS issued IP PINs as an additional safeguard for IRS accounts after the breach; attackers later targeted the PIN-recovery process.
Explicit Confidence 93% · Jack Rhysider EP 26 Details
“we’re also giving them the opportunity to obtain an Identity Protection Personal Identification Number”
Kazeem USES Get Transcript
Kazeem used the Get Transcript website process with purchased personal information to support fraudulent tax returns.
Explicit Confidence 99% · Jack Rhysider EP 26 Details
“Kazeem then used this information to do Get Transcript on the irs.gov website”