The initial email sent by the malicious actors, allegedly from the General Directorate of Public Finances (DGFiP) of France, concerning tax inquiries     The email contained an attached PDF file that seemed to be a letter from the French Tax service:      Figure 7.