FraudHIGH

Fraudsters Exploit Tax Season with Malware in Indonesia

GIGroup-IB BlogFeb 19, 2026
CoretaxIndonesiaMaaStax fraudscams
🎯

Basically, scammers are using fake tax apps to steal money during tax season in Indonesia.

Quick Summary

Fraudsters are exploiting tax season in Indonesia with fake Coretax apps. This scam threatens your financial security and personal information. Stay vigilant and only use trusted sources for tax filing.

What Happened

As tax season heats up in Indonesia, fraudsters are ramping up their attacks. They are using fake tax applications, specifically mimicking Coretax?, to lure unsuspecting users. This is not just a random act; it’s part of a larger, organized campaign that leverages a sophisticated Malware-as-a-Service (MaaS)? infrastructure.

This MaaS model allows fraudsters to easily access and deploy malicious tools without needing advanced technical skills. As a result, anyone can become a cybercriminal with just a few clicks. The fake Coretax? apps are designed to look legitimate, tricking users into providing sensitive information that can lead to financial loss.

Why Should You Care

If you live in Indonesia or are filing taxes there, this situation directly impacts you. Imagine you’re excited to file your taxes and get your refund, only to find out that your personal information has been stolen. This isn't just about losing money; it’s about your identity and financial security being at risk.

Protecting yourself is crucial. Just as you wouldn’t give your house keys to a stranger, you shouldn’t trust unverified apps with your financial information. The consequences can be severe, leading to identity theft and financial ruin.

What's Being Done

Authorities are aware of the situation and are actively working to combat these fraudulent activities. They are likely monitoring the distribution of these fake apps? and may issue warnings to the public. Here’s what you can do right now:

  • Verify app sources: Only download tax-related apps from official app stores.
  • Stay informed: Follow local news for updates on tax-related scams.
  • Report suspicious activity: If you encounter a fake app, report it to the authorities.

Experts are keeping a close eye on this situation, especially as tax season progresses. They are particularly interested in how the MaaS infrastructure evolves and how it might be used for future scams.

💡 Tap dotted terms for explanations

🔒 Pro insight: The MaaS model enables rapid scaling of fraud tactics, making it essential for users to remain vigilant against emerging threats.

Original article from

Group-IB Blog

Read Full Article

Related Pings

HIGHFraud

Phishing Kit Tycoon 2FA Dismantled in Global Takedown

A major phishing platform, Tycoon 2FA, has been shut down by law enforcement. This action protects countless users from potential account breaches. Stay aware of phishing tactics to keep your information safe.

Graham Cluley·Yesterday, 5:58 PM
HIGHFraud

North Korean APTs Leverage AI for Worker Scams

North Korean hackers are ramping up their scams using AI technology. Job seekers are particularly at risk, as these scams become harder to detect. Stay alert and verify job offers to protect yourself from potential fraud.

Dark Reading·Yesterday, 5:49 PM
HIGHFraud

Crypto Heist: $46M Stolen from US Marshals

A government contractor's son has been arrested for allegedly stealing $46 million in cryptocurrency from the US Marshals. This theft raises serious concerns about the security of digital assets. Stay informed to protect your own investments.

The Register Security·Yesterday, 12:02 PM
HIGHFraud

Ransomware Gangs Shift Tactics Amid Effective Backup Strategies

Ransomware gangs are changing tactics as businesses improve data protection. With BEC claims on the rise, the risk of identity theft increases. Stay vigilant and enhance your security measures now.

Help Net Security·Yesterday, 7:00 AM
HIGHFraud

Phishing Persists: Evolving Tactics Fool Employees Daily

Phishing tactics are evolving, making it harder for employees to spot scams. With techniques like QR phishing and lookalike domains, everyone is at risk. Stay informed and vigilant to protect your data!

Help Net Security·Yesterday, 6:30 AM
HIGHFraud

Fraudsters Target Companies with Fake TechCrunch Outreach

Scammers are impersonating TechCrunch staff to reach out to companies. This poses a risk of data breaches and financial loss. Stay vigilant and verify any suspicious outreach.

TechCrunch Security·Mar 5, 2026