Hackers Using Fake Income Tax Department’s Notice to Deploy Malware

A phishing campaign targets Indian taxpayers by mimicking the Income Tax Department website and prompting victims to download a ZIP labeled as an assessment order; the download (domain zyisykm.shop) delivers an NSIS-based silent dropper that installs remote access trojans and infostealers, researchers flagged the domain and a sample was uploaded to MalwareBazaar, and victims are social-engineered to disable antivirus before executing the payload.