Cybercriminals Exploit Tax Season With New Phishing Tactics
2026-03-31T02:52:17Z•3effb8ae3dc37314e587997bf05d252f1ab92823de241e892f91bb1c3647d166
AI-generated code vulnerabilitiesAiTMBECCVE-2026-20131CVE-2026-3055CitrixDeepLoadDockerEtherRATLangflowNetScalerOracle WebLogicPyPIRCERMM malwareTeamPCPTrivyTycoon2FAblockchain C2credential theftdata breachnpmphishingprompt‑poaching extensionssupply chain
What happened
A broad set of active threats and incidents: tax-season phishing campaigns are distributing RMM malware, credential stealers, AiTM and BEC scams; multiple supply‑chain compromises (PyPI, npm, Docker/Trivy) by TeamPCP and others are delivering info‑stealers; critical vulnerabilities are being weaponized rapidly in the wild (Citrix NetScaler CVE-2026-3055 confirmed exploited, Oracle WebLogic RCE and Langflow bug exploited quickly), and CISA has ordered patching for a high‑severity Cisco flaw (CVE-2026-20131). Large-scale data exposures (European Commission AWS breach, Lloyds app glitch), re-emEr
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- infosecurity_magazine
- Record identifier
- 3effb8ae3dc37314e587997bf05d252f1ab92823de241e892f91bb1c3647d166
- Enrichment time
- 2026-03-31T02:52:17Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.