security: When tax season becomes cyberattack season: Phishing and malware campaigns using tax-related lures
Microsoft Security Blog
2026-03-19
Microsoft says threat actors are using tax-season urgency to deliver phishing and malware via refund notices, payroll forms, filing reminders, and fake tax-professional requests. The lures can include malicious attachments, links, and QR codes.