> TritonInfoSec News
Home / Jul 07, 2026 / Story
0
#8 The Hacker News general July 06, 2026 at 10:58 UTC

Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT

By [email protected] (The Hacker News)

AI Summary

Operation DragonReturn, attributed by Seqrite Labs to a suspected China-nexus threat cluster, uses spear-phishing emails impersonating India's Income Tax Department to deliver DcRAT — a remote access trojan designed for sensitive data theft — targeting Indian taxpayers, tax professionals, and corporate finance teams. The campaign's use of a fake tax filing utility as a lure demonstrates continued abuse of government-themed social engineering against high-value financial targets.

Read full article → https://thehackernews.com/2026/07/suspected-china-…

Relevance score: 78.0/100

# More from July 07

  1. 1
    CitrixBleed-ing Again? NetScaler Vulnerability Under Attack Dark Reading
  2. 2
    16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems The Hacker News
  3. 3
    Max severity Adobe ColdFusion flaw now exploited in attacks BleepingComputer
  4. 4
    JadePuffer: The First Complete LLM-Driven Ransomware Attack Dark Reading
  5. 5
    Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure The Hacker News
  6. 6
    North Korean Hackers Target Open Source Developers in Supply Chain Attacks SecurityWeek
  7. 7
    Proof-of-Concept Exploit Released for Linux ‘Bad Epoll’ Root Access Vulnerability SecurityWeek
  8. 9
    France to Stop Certifying Non-Quantum-Safe Encryption Schneier on Security
  9. 10
    Major medical device manufacturer notifies nearly 4 million of breach The Record