Researchers have spotted an ongoing tax-themed malicious email campaign that is delivering the NanoCore remote access trojan (RAT) as its malware payload.
Anthony Kasza and Tyler Halfpop, malware researchers at Palo Alto Networks, write in a blog post how they recently spotted the campaign after coming across a number of emails with malicious attachments and with subject lines featuring the words "tax", "pin", and "report":
- [Attention] Your 2014 Tax Report
- [Urgent Attention] Your 2015 Secure IP PIN
- [ATO: URGENT] Your 2014 Tax Return Report!
- [URGENT ATTENTION] Your 2014 Tax Return!
- [ATO: ATTENTION] Your 2015 Tax Return PIN!
- [IRS ATTENTION] Your 2015 Secure IP PIN!!!
- [HMRC ATTENTION] Your 2015 Tax Report PIN!
- [attention] Your 2015 Tax Return PIN!!!
Full Article