Hackers Use Fake Tax Emails to Trick Users and Install Dangerous Malware
Cybersecurity researchers have discovered that a well-known hacker group called Silver Fox is now targeting people in India with fake emails that appear to come from the income tax department. These emails are designed to trick users into downloading harmful software disguised as a legitimate file. Once a victim interacts with the fake file, the malicious software called ValleyRAT can be installed on their computer without them realizing it.
The attackers carefully craft these emails to look official and relevant, often using the idea of tax notices or documents to entice users to open attachments. When users click on the attachment, they are taken to a website where a harmful file is downloaded. This file contains the ValleyRAT malware, which gives the hackers remote access to the victim’s machine.
Once ValleyRAT is installed, it lets the hackers secretly control the affected computer. This type of malware is dangerous because it can monitor what a person types, steal login information, capture sensitive data, and remain hidden for a long time. The malware is also flexible, meaning the attackers can add new functions to it depending on what they want to do next.
Silver Fox is believed to be linked to a Chinese cybercrime group that has been active for several years. While their past activity focused mostly on different parts of the world, this updated campaign shows they are now broadening their targets to include users in India. The group has used a variety of clever tricks in the past, such as setting up fake download sites and manipulating search results, to spread harmful software.
Because these phishing emails and fake files can look so convincing, experts warn that people should always be cautious when receiving unexpected attachments — especially those that claim to be official tax or government communications. It’s safer to verify the sender’s identity and avoid opening files or links unless you are sure they are legitimate. Keeping antivirus software up to date and being aware of how phishing scams work can also help protect you from falling victim to these kinds of attacks.
