During the declaration period, attackers have intensified their attacks on Russians, sending emails with viruses disguised as notifications from the Federal Tax Service.
According to Mail.ru, over 880,000 such messages have been identified in the past month and a half. Malicious attachments are often disguised as documents with names like "Notification," "Invoice," or "Documents for Signature" and contain archives (.zip, .rar, .cab).
Opening the files leads to data leaks: attackers gain access to bank accounts, personal information, and victims' devices. Scammers use domains that mimic official resources, and the subject lines of the emails are tied to the tax season to gain trust.
The emails are sent out en masse. The attachments contain hidden phishing links or malicious scripts. For example, the "Documents for Signature" archive can launch spyware that transmits logins and passwords from financial services.
Experts recommend ignoring emails with attachments from unknown senders and checking the recipient's domain. For tax interactions, it is safer to use the personal account on the official website of the Federal Tax Service. Two-factor authentication and antivirus software will reduce the risk of hacking.
Read materials on the topic:
Scammers switch to phishing: Attackers have come up with a new way to deceive with mailings
Internet scammers have become more active before "Black Friday" in Russia