{
  "id": 4955674,
  "title": "A Single Canadian Tax Lure Spread into a 46-Country, US-First RMM Campaign",
  "url": "https://urgent.news/2026/09/01/a-single-canadian-tax-lure-spread-into-a-46-country-us-first-rmm",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-01T21:14:11.000Z",
  "source": {
    "name": "HackerNoon",
    "slug": "hackernoon",
    "url": "https://hackernoon.com/a-single-canadian-tax-lure-spread-into-a-46-country-us-first-rmm-campaign?source=rss"
  },
  "original_language": "en",
  "account": "The phishing operation, initially aimed at Canadians with fake Canada Revenue Agency (CRA) T4 tax documents, is part of a broader remote-access campaign affecting 46 countries. The attackers use a reusable fake-document kit to deliver legitimate remote management software installers, enabling them to gain remote access to compromised systems. The payload, signed legitimate RMM software, can bypass signature-based antivirus systems. The campaign targets various industries, with education, technology, and government appearing prominently. It is important to note that this is not a one-off incident, as the activity window extends from January 2026 to present, with a steady 17–33 cases per month.",
  "summary": "ANY.RUN uncovers a 46-country phishing campaign using fake tax documents, Vercel infrastructure, and legitimate RMM software for remote system access.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}