A modular phishing platform is being used to push IRS and Social Security lures at scale, showing how government impersonation can be industrialized for dozens or hundreds of operators.