Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT

A sophisticated hacking group with suspected ties to China has been targeting Indian taxpayers and financial professionals with a phishing campaign masquerading as the Income Tax Department of India. The goal is to deploy a remote access trojan, DcRAT, to steal sensitive financial data. Dubbed Operation DragonReturn by cybersecurity firm Seqrite Labs, this operation highlights the growing threat of state-sponsored cyber espionage and underscores the need for heightened cybersecurity measures to protect sensitive financial information. The campaign's success could have significant implications for both national security and individual privacy.