Fake Tax Assessment Pages Infect Windows Users with Malware

Hackers are targeting Windows users in India with a campaign named TAX#TRIDENT, utilizing fake income tax assessment pages to distribute malware. Victims are lured into downloading malicious ZIP files disguised as official documents, creating a sense of urgency around tax penalties. The campaign has shown versatility in delivery methods while maintaining the same deceptive tax lure. Currently, there are no specific CVEs or tools mentioned, but the attack is ongoing and poses a significant risk to users who may fall for these scams. Security researchers are monitoring the situation closely, but specific numbers on affected users or systems have not been disclosed.

Key Points: • The TAX#TRIDENT campaign targets Windows users in India with fake tax documents. • Malicious files are disguised as official income tax assessments to trick victims. • The attack leverages urgency to increase the likelihood of user interaction.