The State Tax Service has uncovered new fraud schemes involving the distribution of emails containing malicious software.

According to the tax service, these emails have the subject line «Document Request from the State Tax Service of Ukraine: *ORGANIZATION NAME*» and include a PDF attachment.

They link to a site hosting a JS script named «Document Request State Tax Service of Ukraine SED 22.05.2025- 0048811.pdf.js», which triggers the download of remote control software onto users' computers.

The tax service emphasized that official emails always contain the domain «tax.gov.ua» after the «@» symbol.

"Cybersecurity specialists from the tax service, together with CERT-UA, have identified instances of fraudulent emails purportedly sent by tax authorities," the tax service stated.