New Campaign Targeting US Entities with Malware Bundled in Tax-Themed Documents
released on 2023-04-05 @ 07:54:10 AM
Threat actors keep taking advantage of the tax season in the US, using tax-related phishing scams to US-based victims to infect systems with stealthy malware. The Securonix Threat Research team has identified an ongoing hyper-targeted phishing campaign (TACTICAL#OCTOPUS) targeting individuals in the US using seemingly valid tax forms and contracts. Some of the lure documents observed contained employee W-2 tax documents, I-9, and real estate purchase contracts.