Malvertising Campaign Targets Tax Seekers with EDR Killer Malware
In a worrying new cybersecurity threat, a malvertising campaign has been uncovered, preying on U.S. residents searching for tax-related documents. This attack, active since January 2026, tricks users into downloading rogue software that compromises their devices.
When individuals search for terms like “W2 tax form,” they may unknowingly click on fraudulent Google ads leading to malicious sites. These sites deliver a tool called HwAudKiller, designed to disable security programs. Over 60 incidents of malicious sessions have been identified, indicating a broad impact on users’ security.
While the ultimate goal of the attackers remains unclear, indications suggest they may be preparing for ransomware deployment or selling access to other cybercriminals. Users can protect themselves by avoiding suspicious links, ensuring robust security software is in place, and regularly updating their systems.
Risk Level: High
Source: View Original Report
