logo

Tax Season Scams

ID: ac5e3c5c-5ce0-50f8-b51b-5fe256edddd3

STIX ID: report--ac5e3c5c-5ce0-50f8-b51b-5fe256edddd3

Feed Name: Zscaler Security Research Blog

Threat Score
70/100

Date Published: 2025-04-02

Date Updated: 2026-05-01

...
...

This Zscaler report describes multiple tax-season scams: fake TurboTax download managers that install adware/monitoring tools, an email-distributed Bagsu dropper that delivered the Gamarue worm, and an India-targeted ‘Tax Challan’ spam campaign delivering a Visual Basic infostealer which runs bundled password-dump utilities and exfiltrates credentials. The report includes observed domains, infection behaviors, VirusTotal detection ratios, and notes that multi-layered protections are provided while urging user caution.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.