Netcrook
#tax phishing
Tax Lures, Signed Files, and a Malware Chain Built on Trust
A compliance-themed phishing wave aimed at Indian taxpayers shows how official-looking pressure and a signed Windows executable can work together to move remote-access malware onto a victim machine.
Fake Tax Notices, Real Risk: How a Spoofed Portal and a .img Lure Can Turn Routine Mail Into Malware
A tax-branded phishing operation uses a lookalike portal and a disk-image attachment to exploit trust, urgency, and the habit of opening official-looking files.
Tax Lures, Hidden Payloads: Windows Users Are Being Steered Toward Memory-Resident Malware
Tax-branded phishing emails are being used to deliver in-memory malware on Windows, a tactic that shifts detection away from saved files and toward what happens after a user opens the attachment.
Tax Emails, Hidden Payloads: Why a Windows Inbox Can Become a Memory-Only Crime Scene
A tax lure is only the first move; the harder part for defenders is the kind of malware that may run in memory and leave fewer clues on disk.
Fake Tax Notices, Real Windows Risk: The Trap Behind TAX#TRIDENT
A lure built around Indian tax assessment and penalty pages is being used to push Windows users toward a download chain that turns an “official” file into malware risk.