Hackers Use Fake Income Tax Assessment Pages to Infect Windows Systems

Cybersecuritynews •Tushar Subhra Dutta • May 20, 2026

A new threat campaign is targeting Windows users in India by disguising malicious files as official income tax documents. Researchers have tracked the operation under the name TAX#TRIDENT, and it has shown the ability to pivot across multiple delivery methods while keeping the same convincing tax lure intact. The attack does not rely on any […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fake Tax Assessment Pages Infect Windows Users with Malware Hackers are targeting Windows users in India with a campaign named TAX#TRIDENT, utilizing fake income tax assessment pages to distribute malware. Victims are lured into downloading malicious ZIP files disguised as official documents, creating a sense of urgency around tax penalties. The campaign has shown versatility in delivery methods while maintaining the same deceptive tax lure. Currently, there are no specific CVEs or tools mentioned, but the attack is ongoing and poses a significant risk to users who may fall for these scams. Security researchers are monitoring the situation closely, but specific numbers on affected users or systems have not been disclosed. 2 sources 49

Extracted Entities

Hackers Use Fake Income Tax Assessment Pages to Infect Windows Systems

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

Countries (1)

Platforms (1)