In an audacious twist on customer service, Indian citizens are now being served up malware by hackers posing as the Income Tax Department. Because why just dread tax season when you can experience the thrill of a digital heist too? It’s like getting audited, but with the added excitement of criminal surveillance.

The cyber espionage campaign, unearthed by the sleuths at eSentire, involves phishing emails that trick users into downloading malicious software. Yes, the Blackmoon malware is the surprise bonus for anyone gullible enough to click on those delightful tax refund emails. Finally, a tax refund process as complicated and suspicious as the tax code itself.

These emails aim to deliver a multi-stage backdoor, which I’m sure sounds comfortable, but definitely isn’t. It’s a digital invasion with the subtlety of an elephant in a data center, reminding us all that the only thing more persistent than paying taxes is hackers trying to siphon our data while doing so.