Microsoft Warns of New Tax Returns Phishing Scams Targeting You

Microsoft Threat Intelligence warns of widespread, sophisticated tax-season phishing campaigns that impersonate employers, tax agencies, and payment processors to trick victims into opening malicious HTML attachments or links; campaigns leveraging PhaaS tools like Tycoon and NakedPages use JavaScript-driven redirects, Cloudflare captcha checks, and AiTM techniques to harvest credentials, bypass MFA, and install info-stealing malware targeting login credentials, crypto wallets, and stored client data.