Three recent spam campaigns are pretending to be from ADP and Paychex; in reality, the malicious emails are spreading the TrickBot trojan. The TrickBot banking trojan is exploiting tax season by pushing malicious Microsoft Excel spreadsheet documents via spam campaigns. Once downloaded, TrickBot steals as much data possible, researchers said including banking credentials and more. Researchers warn users to be wary of unsolicited tax-related unsolicited emails and keep all critical systems up to date and patched.
Source: https://threatpost.com/spam-campaigns-spread-trickbot-malware-with-tax-lure/143551/