Security brief: tax scams aim to steal funds from taxpayers Threat actors extensively abused tax-themed lures in early 2026, using phishing and impersonation to deliver remote monitoring and management (RMM) tools, information stealers, and credential-harvesting pages across global targets. Newly tracked actors like TA4922 and TA2730 leveraged realistic social engineering (including real phone numbers and organization impersonation) and diverse delivery methods...

In early 2026, over 100 tax-themed campaigns deployed malware, RMM tools, and phishing schemes targeting taxpayers in the US, Canada, and Australia. Actors TA4922 and TA2730 used realistic impersonation and diverse delivery methods. #TaxFraud #TA4922