Click here to access the web article.
Watch out — that income tax form could actually be dangerous malware....
- Fake tax notices are becoming delivery vehicles for sophisticated remote access malware
- Attackers hide malicious code behind convincing government branding and legal references
- The malware quietly establishes encrypted communication with servers outside the country
A new phishing campaign is using fake income tax assessment notices to deliver dangerous malware to unsuspecting victims across India.
Researchers at CYFIRMA identified the operation, which relies on a fraudulent website built to resemble official communication from the Indian Income Tax Department closely.
The fake portal, hosted on a recently registered domain, presents a convincing assessment order complete with legal references, financial penalties, and urgent compliance language designed to pressure recipients into acting quickly.