Threat Intelligence Brief
Curated summary with source attribution
Source: foxnews.com
Threat Risk: Medium
Victim: General public and Social Security beneficiaries
Incident: A phishing campaign impersonating the Social Security Administration to harvest personal information.
Impact: Potential theft of Social Security numbers and sensitive PII, leading to identity theft and financial fraud.
Attacker: Unidentified threat actors
Analysis: Threat actors are leveraging the urgency of government benefits by sending spoofed emails regarding ‘ready’ Social Security statements. The campaign uses professional branding and the official SSA logo to lure victims into clicking malicious links. The primary indicator of fraud is the use of a non-government domain, specifically loradmiadministraciones.com, rather than a .gov address.
Recommendations: Verify that all official government communications originate from a .gov email domain.; Avoid clicking ‘View Statement’ buttons in unexpected emails; instead, log in directly via the official agency portal.
Source: Fox News
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source