Cybercriminals widen net as assessees rush to meet I-T return filing deadline

Cybercriminals are sending fake income tax department notices via WhatsApp during ITR filing season, according to cybersecurity firm CloudSek.

The campaign uses malware-laden ZIP attachments named 'ITD.zip' that install malware on Android devices to steal SMS, contacts, and keystrokes, and overlay fake login screens on banking apps.

Fake phishing websites mimic the official income-tax e-filing portal to capture PAN, Aadhaar, passwords, OTPs, and bank account details.

Forged documents feature the Govt of India emblem, fabricated reference numbers, and fake tax officials, citing sections 271(1)(c) and 276C of the Income Tax Act.

The scams exploit taxpayers' expectation of official communications, as millions await refunds and notices during the deadline rush.