Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT

Summary

A suspected China-nexus threat activity cluster has been observed targeting Indian taxpayers, tax professionals, and corporate finance teams to deliver a remote access trojan designed to steal sensitive data from compromised hosts. The multi-stage campaign, codenamed Operation DragonReturn by Seqrite Labs, involves sending spear-phishing emails impersonating the Income Tax Department of India.

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.