Tax-Themed Phishing Campaign Delivers Malware Via Microsoft Management Console Files

Securonix warns of a tax-themed phishing campaign targeting Pakistani users that leverages .msc (Microsoft Management Console) files to run embedded scripts under mmc.exe (observed JavaScript) and deliver backdoor payloads; the report details lure filenames, the attack vector, and recommends avoiding unsolicited attachments and common archive/document file types.