Indian Users Targeted in Multi-Stage Backdoor Cyber-Espionage Campaign via Tax Phishing

Cybersecurity researchers have uncovered an ongoing campaign targeting Indian users with a multi-stage backdoor as part of a suspected cyber-espionage operation. According to eSentire's Threat Response Unit (TRU), the activity involves phishing emails impersonating the Income Tax Department of India to trick victims into downloading a malicious archive. The ultimate goal is to gain backdoor access to victims' systems. The campaign deploys the Blackmoon malware as mentioned in the title.