logo

Phishing Campaign Targets Japanese Taxpayers: How To Stay Safe

ID: aa80d65f-55b7-5638-afe5-bf2fae715747

STIX ID: report--aa80d65f-55b7-5638-afe5-bf2fae715747

Feed Name: Cyble Blog

Threat Score
72/100

Date Published: 2025-11-27

Date Updated: 2026-07-16

...
...

Cyble Research & Intelligence Labs documented an active phishing and smishing campaign targeting Japanese taxpayers by spoofing the National Tax Agency to steal PII and V-Preca prepaid card details; the campaign also distributes a FakeCop Android malware (Roaming Mantis) that requests SMS/contacts permissions, fetches C2 via a proxy, exfiltrates data, sends and deletes SMS to propagate, and the report includes APK hashes, C2/proxy URLs, and numerous phishing domains as IOCs.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.