Tax Filing Scams Used to Deliver Malware in New Cybercrime Campaigns

Tax‑themed phishing campaigns in early 2026 are delivering legitimate RMM tools, commodity malware, and credential‑harvesting pages worldwide; tracked operations (including TA4922 and TA2730) impersonate tax authorities and financial services to obtain credentials, deploy persistent remote access, and enable follow‑on fraud, data theft, and access brokering — posing significant risk to individuals and organizations.