Threat actors have launched a new phishing campaign where they send fake emails that appear to come from New York’s Department of Labor. The fake emails, which include the real logo for the State’s department of labor, attempt to trick people into giving up personal information in order to receive aid for the ongoing pandemic. If these attempts are successful, threat actors gain enough information to steal the individual’s identity or sell the information on the dark web. The threat actors disguise their identity with a display name of firstname.lastname@example.org when in reality, the real email address is naij30[@]naija9icevibes.com, a Panamanian registered domain with no association to the State of New York. The email also adds a sense of urgency making victims feel as though they may miss out on the government aid if they don’t act fast.
By Akshay Rohatgi and Randy Pargman About this Student Research Project Binary Defense’s mission is