Hackers Using Fake Taxman Id To Steal Info

A COMPUTER malware that tries to steal crucial information of recipients by sending out emails to unsuspecting individuals and financial organisations in the country under the guise of the Income-Tax (I-T) Department is active, the government’s cybersecurity agency has said.

- 

Indian Computer Emergency Response Team (CERT-In) has issued an advisory, saying a phishing campaign is underway since September 12 at least.

Phishing refers to stealing a person’s personal vital information such as banking, credit card details and passwords. A malware is an e-virus.

The advisory said at least two variants of the latest malware emails have been observed. The first variant includes an attachment with the extension .img, which contains a malicious.pif file. The second variant lures the users to download a malicious .pif file hosted on a sharepoint page via a link of fraudulent domain incometaxindia[.]info, it said. This domain, it said, has now been disabled.