Chinese-Speaking Hackers Target Indian Firms With Hindi Tax Phishing

A Chinese-speaking threat actor has expanded its activity to India, using Hindi-language phishing emails impersonating the Income Tax Department to target organisations, according to threat research from Proofpoint. The campaigns, observed in July 2026, used fake tax notices, penalty demands and threats of legal action to trick recipients into opening malicious attachments that delivered the PackClient malware framework.

Proofpoint said the activity was linked to TA4922, a threat actor first observed in May targeting organisations with operations in mainland China. The group conducted at least two campaigns against Indian organisations in July, marking a geographic expansion of its activity.

Hindi Phishing Targets Indian Organisations

The attacks relied on familiar tax-related themes to create urgency. Emails were written in Hindi and claimed that recipients had underreported income or failed to disclose foreign assets. Some messages warned of fines, penalties or imprisonment if the purported tax issues were not addressed.

The emails...

Copyright of this story solely belongs to ciol.com. To see the full text click HERE