{"id":7353,"date":"2026-08-01T00:26:06","date_gmt":"2026-08-01T00:26:06","guid":{"rendered":"https:\/\/koshalsambada.in\/?p=7353"},"modified":"2026-08-01T00:26:06","modified_gmt":"2026-08-01T00:26:06","slug":"cybercriminals-widen-net-as-assessees-rush-to-meet-i-t-return-filing-deadline","status":"publish","type":"post","link":"https:\/\/koshalsambada.in\/?p=7353","title":{"rendered":"Cybercriminals widen net as assessees rush to meet I-T return filing deadline"},"content":{"rendered":"<p><br \/>\n<\/p>\n<div data-articlebody=\"1\"><video-embed value=\"false\"\/><\/p>\n<div class=\"ihgno clearfix  \">\n<div class=\"e9jwa\">\n<div class=\"vdo_embedd\">\n<div class=\"GfdvZ\">\n<section class=\"_bIDB  clearfix id-r-component leadmedia undefined undefined  E9tg9 \" style=\"top:0px\">\n<div class=\"_bIDB\" data-ua-type=\"1\" onclick=\"stpPgtnAndPrvntDefault(event)\">\n<div class=\"ypVvZ\">\n<div class=\"WGttI\"><img src=\"https:\/\/static.toiimg.com\/thumb\/msid-132779268,imgsize-129414,width-400,height-225,resizemode-4\/ai-generated-image.jpg\" alt=\"Cybercriminals widen net as assessees rush to meet I-T return filing deadline\" decoding=\"async\" fetchpriority=\"high\"\/><\/div>\n<\/div>\n<\/div>\n<\/section>\n<\/div><\/div>\n<\/div>\n<p>BENGALURU: Cybercriminals are exploiting the income-tax return (ITR) filing season by sending fake income tax department notices over WhatsApp and other messaging platforms, using forged govt documents, cloned tax portals and malware to steal banking credentials and gain remote access to victims\u2019 devices, according to a report by Bengaluru-based cybersecurity firm CloudSek.<span class=\"id-r-component br\" data-pos=\"2\"\/>The campaign comes at a time when millions of taxpayers are expecting messages related to refunds, notices and compliance deadlines, making them more likely to trust official-looking communications.<span class=\"id-r-component br\" data-pos=\"4\"\/>CloudSek said attackers are using two primary methods: malware-laden WhatsApp attachments and phishing websites that closely mimic the official income-tax e-filing portal.<span class=\"id-r-component br\" data-pos=\"7\"\/>In the WhatsApp campaign, victims receive an \u201coffice memorandum\u201d from an unknown or compromised account masquerading as the income tax department. <!-- -->The forged document features govt of India emblem, bilingual English and Hindi text, fabricated reference numbers and the name of a fake tax official to appear authentic.<span class=\"id-r-component br\" data-pos=\"12\"\/>The notice falsely claims that discrepancies have been detected under Sec 271(1)(c) of the Income Tax Act and warns of prosecution under Sec 276C, giving recipients just 72 hours to respond.<span class=\"id-r-component br\" data-pos=\"14\"\/>Instead of including a web link, the message carries a ZIP attachment named \u201cITD.zip\u201d, presented as tax documents. On Android devices, opening the file installs malware capable of accessing SMS messages, including banking one-time passwords (OTPs), contacts and keystrokes. The malware can also overlay fake login screens on banking and payment applications to capture usernames, passwords, and other sensitive information.<span class=\"id-r-component br\" data-pos=\"16\"\/>In a parallel campaign, fraudsters direct users to websites designed to closely resemble the official income-tax e-filing portal. These fake sites prompt users to enter PAN number, Aadhaar, passwords, OTPs, and bank account details.<span class=\"id-r-component br\" data-pos=\"18\"\/><\/div>\n<\/div>\n<p><br \/>\n<br \/><a href=\"https:\/\/timesofindia.indiatimes.com\/business\/india-business\/cybercriminals-widen-net-as-assessees-rush-to-meet-i-t-return-filing-deadline\/articleshow\/132779263.cms\" target=\"_blank\" rel=\"noopener\">Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>BENGALURU: Cybercriminals are exploiting the income-tax return (ITR) filing season by sending fake income tax department notices over WhatsApp and other messaging platforms, using forged govt documents, cloned tax portals and malware to steal banking credentials and gain remote access to victims\u2019 devices, according to a report by Bengaluru-based cybersecurity firm CloudSek.The campaign comes at [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":7354,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-7353","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-31"],"magazineBlocksPostFeaturedMedia":{"thumbnail":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/ai-generated-image.jpg","medium":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/ai-generated-image.jpg","medium_large":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/ai-generated-image.jpg","large":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/ai-generated-image.jpg","1536x1536":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/ai-generated-image.jpg","2048x2048":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/ai-generated-image.jpg","blogsy-small":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/ai-generated-image.jpg","blogsy-small-tall":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/ai-generated-image.jpg","blogsy-small-square":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/ai-generated-image.jpg","blogsy-small-masonry":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/ai-generated-image.jpg","blogsy-medium":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/ai-generated-image.jpg","blogsy-medium-masonry":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/ai-generated-image.jpg","blogsy-large":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/ai-generated-image.jpg","blogsy-wide":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/ai-generated-image.jpg"},"magazineBlocksPostAuthor":{"name":"admin","avatar":"https:\/\/secure.gravatar.com\/avatar\/8709732a479614e7a8aa24d3eb1b239f30dc6d90c61464ed495001e7a469d856?s=96&d=mm&r=g"},"magazineBlocksPostCommentsNumber":"0","magazineBlocksPostExcerpt":"BENGALURU: Cybercriminals are exploiting the income-tax return (ITR) filing season by sending fake income tax department notices over WhatsApp and other messaging platforms, using forged govt documents, cloned tax portals and malware to steal banking credentials and gain remote access to victims\u2019 devices, according to a report by Bengaluru-based cybersecurity firm CloudSek.The campaign comes at [&hellip;]","magazineBlocksPostCategories":["\u0b26\u0b47\u0b36 \u0b2c\u0b3f\u0b26\u0b47\u0b36"],"magazineBlocksPostViewCount":1,"magazineBlocksPostReadTime":2,"magazine_blocks_featured_image_url":{"full":["https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/ai-generated-image.jpg",400,225,false],"medium":["https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/ai-generated-image.jpg",300,169,false],"thumbnail":["https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/ai-generated-image.jpg",150,84,false]},"magazine_blocks_author":{"display_name":"admin","author_link":"https:\/\/koshalsambada.in\/author\/admin"},"magazine_blocks_comment":0,"magazine_blocks_author_image":"https:\/\/secure.gravatar.com\/avatar\/8709732a479614e7a8aa24d3eb1b239f30dc6d90c61464ed495001e7a469d856?s=96&d=mm&r=g","magazine_blocks_category":"<a href=\"#\" class=\"category-link category-link-31\">\u0b26\u0b47\u0b36 \u0b2c\u0b3f\u0b26\u0b47\u0b36<\/a>","_links":{"self":[{"href":"https:\/\/koshalsambada.in\/index.php?rest_route=\/wp\/v2\/posts\/7353","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/koshalsambada.in\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/koshalsambada.in\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/koshalsambada.in\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/koshalsambada.in\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7353"}],"version-history":[{"count":0,"href":"https:\/\/koshalsambada.in\/index.php?rest_route=\/wp\/v2\/posts\/7353\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/koshalsambada.in\/index.php?rest_route=\/wp\/v2\/media\/7354"}],"wp:attachment":[{"href":"https:\/\/koshalsambada.in\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7353"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/koshalsambada.in\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7353"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/koshalsambada.in\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7353"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}