Cybercriminals exploit tax season with new phishing tactics

A wave of tax-themed cyber campaigns delivering malware, remote access tools, fraud schemes and credential phishing has been detected in early 2026.

Proofpoint researchers identified more than a hundred such operations, highlighting how attackers continue to exploit the pressures and expectations tied to tax season.

A new advisory published on March 30 by the cybersecurity vendor found that malicious campaigns are increasingly using remote monitoring and management (RMM) tools. The firm also observed activity from newly identified threat actors and a broader mix of social engineering techniques.

Read more at Infosecurity Magazine