https://www.bleepingcomputer.com/news/security/amadey-botnet-targets-us-taxpayers-with-tax-refund-notice/

A phishing campaign has been spotted recently delivering Amadey botnet malware to taxpayers in the U.S. through fake income tax refund emails.

Amadey is relatively new on the scene but multiple groups have used it to drop secondary malware on infected computers. It was previously seen distributed by RIG exploit kit. One of the actors turning to Amadey's deliver services is TA505, a group that attacks financial institutions and retail companies.