Voldemort Strikes Again: New Malware Disguises as Tax Agencies to Hex Organizations Worldwide
A new malware campaign named “Voldemort” is impersonating tax agencies and spreading globally. As per a Proofpoint report, over 20,000 emails have targeted organizations in insurance, aerospace, transportation, and education sectors. Voldemort utilizes Google Sheets as a command and control server, making it a sneaky wizard in the realm of cyber espionage.

Hot Take:
Voldemort’s back, and he’s not just after Harry anymore – he’s targeting your taxes! This cyber campaign is like a bad sequel no one asked for, featuring phishing emails that make you wish you never had to file taxes again. Seriously, using tax authorities to lure victims? That’s just dark magic!
Key Points:
- New malware named “Voldemort” is spreading via phishing emails impersonating tax agencies.
- Campaign began on August 5, 2024, targeting over 70 organizations with 20,000 emails.
- Primary targets: insurance, aerospace, transportation, and education sectors.
- Uses search-ms URI and side-loading techniques to deploy the malware.
- Voldemort uses Google Sheets as a command and control server for data exfiltration and commands.
Already a member? Log in here