NJ state employees targeted by fake "Email Security Notification" phishing emails. These emails were impersonating the NJ Office of the Attorney General. Read this article to learn how to spot email spoofing and protect your login credentials and data.
Groundbreaking OpenAI products such as Whisper and ChatGPT have become very popular. Cybercriminals developed phishing scams to capitalize on Chat GPT's popularity. The NJCCIC reported a newly created YouTube channel, "OpenAI Live," attempting to scam users.
The NJCCIC observed phishing campaigns claiming to be from the Better Business Bureau (BBB) and targeting business owners in an attempt to deliver Ursnif data-stealing malware to potentially gain remote access, exfiltrate data, and deploy ransomware.
The NJCCIC observed a phishing campaign impersonating Office 365 and using the subject line, “[Recipient Email Domain] Expired Password Notification Thursday, March 16, 2023.” The email alerts the recipient that their password will expire soon but they may keep it by clicking a link.
On March 14, the NJCCIC observed a phishing campaign utilizing a legitimate file-sharing platform and URL redirects to steal user credentials. In this scheme, the email includes a Dropbox link to view a document; however, this link redirects users to a known phishing page.
Emotet has resurfaced worldwide after three months of inactivity. Cofense researchers have discovered malicious email campaigns using finance and invoice lures to collect information for future campaigns, gain remote access, deploy ransomware, and exfiltrate data.
The NJCCIC was notified of the resurgence of a car decal scam in which individuals receive text messages from someone impersonating a well-known company and offering the recipient a weekly payment to have an advertising decal placed on their vehicle.
The NJCCIC recently received multiple reports of vishing schemes. In these calls, the scammer attempts to gain trust and legitimacy by sharing some of the recipient’s personal details; however, this information is typically a collection of aggregated publicly available details easily found online.
The NJCCIC observed websites containing SocGholish. SocGholish is a malware loader that exploits vulnerable website infrastructure and can perform reconnaissance and deploy malicious payloads, such as remote access trojans (RATs), information stealers, and ransomware.
The NJCCIC receives reports of impersonation scams in which threat actors research their target and pretend to be trusted sources, such as legitimate businesses, banks, and officials from government agencies or entities including the Federal Bureau of Investigation (FBI).
