An information stealing computer malware, masking as a message from the Income Tax Department, has been found prowling in the Indian cyberspace, a federal cyber-security agency has warned in a recent advisory.

“A phishing and malware campaign is active since at least September 12 and is targeting individuals as well as financial organisations. The campaign involves fake emails purporting to be sent from Indian Income Tax Department,” the CERT-In said its latest advisory accessed by PTI.

Indian Computer Emergency Response Team (CERT-In) is the national agency to combat hacking, phishing incidents, and to fortify security-related defences of the Indian Internet domain. While phishing denotes to a category of cybercrime where a person’s personal vital information like banking, credit card details and passwords are stolen, malware is an e-virus.