According to a recent LinkedIn post from Bolster AI, the company’s research team is tracking an extensive tax-season cyber campaign impersonating the IRS and the Canada Revenue Agency. The post highlights that in 2026, a large majority of newly registered IRS-themed domains are reportedly active and malicious within hours of registration, with 125 malicious URLs identified and malware targeting both Windows and macOS.
Claim 55% Off TipRanks
- Unlock hedge fund-level data and powerful investing tools for smarter, sharper decisions
- Discover top-performing stock ideas and upgrade to a portfolio of market leaders with Smart Investor Picks
The post also points to underground services allegedly offering 40% to 45% commissions on stolen tax refunds, underscoring the financial incentives driving these attacks. For investors, this research emphasis suggests ongoing demand for advanced threat intelligence and anti-phishing solutions, which could support Bolster AI’s positioning in the cybersecurity market, particularly around high-risk tax seasons when enterprises and financial institutions may increase spending on protection tools.

