Cybercriminals are targeting taxpayers during income tax return filing season. They send fake notices via WhatsApp and use cloned tax portals. These scams aim to steal banking credentials and gain device access. Attackers use malware-laden attachments and phishing websites to deceive victims. This campaign exploits the expectation of official communications from the tax department.