Cyber Command

The NJCCIC was notified of the resurgence of a car decal scam in which individuals receive text messages from someone impersonating a well-known company and offering the recipient a weekly payment to have an advertising decal placed on their vehicle.

The NJCCIC recently received multiple reports of vishing schemes. In these calls, the scammer attempts to gain trust and legitimacy by sharing some of the recipient’s personal details; however, this information is typically a collection of aggregated publicly available details easily found online.

The NJCCIC receives reports of impersonation scams in which threat actors research their target and pretend to be trusted sources, such as legitimate businesses, banks, and officials from government agencies or entities including the Federal Bureau of Investigation (FBI).

Cybercriminals often take advantage of specific times of the year and with tax season underway, they are quick to launch social engineering campaigns conducted via email, phone, and SMS text messages to seek out your tax information. Read for tips on how to protect against this scam.

The NJCCIC detected an uptick in TOAD (or telephone-oriented attack delivery) phishing campaigns which is a type of social engineering attack that lures potential victims to contact fraudulent call centers managed by threat actors in attempts to steal credentials.

NJCCIC analysts identified an aggressive phishing campaign targeting several NJ State agencies that regularly communicate with law firms. The phishing email’s subject line claims to reference various types of legal documents such as settlements or reviews.