Cybersecurity firm Kaspersky attributed a global wave of phishing attacks to the SilverFox threat group masquerading as tax related files and warned the campaign now deploys a Python backdoor it has named ABCDoor. Kaspersky said the campaign began in December 2025 with emails in India that closely mimicked notices from the Income Tax Department.