It's tax season, and scammers are a step ahead of filers, Microsoft says

Microsoft disclosed a January 2024 tax-season phishing campaign that sends faux tax-return emails containing an attachment that redirects victims to a blurred, fake document site; when users interact, an info-stealer is deployed to capture credentials. The campaign uses realistic imagery, legitimate logos, and AI-assisted messaging to increase success against vulnerable groups (new filers, older taxpayers, small businesses); Microsoft recommends verifying senders, avoiding unexpected links, and enabling MFA.