'Voldemort' Malware Curses Orgs Using Global Tax Authorities

**Executive summary:** The "Voldemort" campaign is a global, active phishing campaign impersonating tax authorities to deliver a custom C backdoor that exfiltrates data and can drop additional payloads; it uses Google Sheets as a covert C2 channel and DLL sideloading via legitimate WebEx software, with Proofpoint reporting over 20,000 phishing messages and spikes of thousands in a single day.