Tax-Themed Phishing Campaign Emerges

The phishing messages contain malicious documents that purport to contain tax-related content but ultimately deliver NetWire and Remcos remote access Trojans that enable hackers to take control of victims’ devices, the researchers say. The malware has file and system management capabilities. The campaign, which is designed to evade antivirus tools, tricks victims into opening the tax-themed Word document containing a malicious macro that downloads an OpenVPN client on the targeted machine.