Back Gbhackers

Tax Filing Scams Used to Deliver Malware in New Cybercrime Campaigns

Gbhackers •Mayura Kathir • March 31, 2026

Cybercriminals are once again exploiting global tax seasons, abusing IRS and tax filing lures to deliver malware, remote monitoring and management (RMM) tools, and credential phishing in a wave of new 2026 campaigns. Security researchers have already tracked more than a hundred tax-themed operations worldwide, with a noticeable increase in the use of legitimate RMM […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Tax Season Malware Campaigns Exploit IRS Lures in 2026 In 2026, cybercriminals are leveraging the global tax season to launch extensive malware campaigns. Over a hundred tax-themed operations have been identified, with attackers impersonating the IRS and other tax authorities to deliver malware, remote monitoring tools, and conduct credential phishing. The campaigns are characterized by a more organized approach compared to previous years, indicating a significant increase in phishing attempts during this period. Victims include individuals and organizations targeted through emails and fake tax filing websites. Security researchers are monitoring these activities closely as the tax season progresses. The use of legitimate remote monitoring and management tools has been noted, raising concerns about the sophistication of these attacks. Current status indicates ongoing campaigns with no immediate resolution in sight. 2 sources 60

Extracted Entities

Tax Filing Scams Used to Deliver Malware in New Cybercrime Campaigns

The full story

Extracted Entities

Attack Types (2)

MITRE ATT&CK (1)

Tools (1)