Uncategorized FINRA warns of phishing campaign exploiting imposter domain names – IT PRO
View all Business
View all Cloud
View all Hardware
View all Infrastructure
View all Security
View all Software
View all Technology
Shutterstock
The Financial Industry Regulatory Authority (FINRA) has warned of a new phishing campaign that involves fraudulent emails using domain names pretending to be the financial regulator.
In an advisory, the regulator said that the fake emails used the false domains @finrar-reporting.org, @Finpro-finrar.org and @gateway2-finra.org. The domains were registered on 12 August 2021.
It said that these emails asked recipients to click a link to “view request” and provide information to “complete” that request, noting that “late submission may attract penalties.”
The regulator that anyone who clicked on any link or image in the email should immediately notify the appropriate individuals in their firm of the incident.
“None of these domain names are connected to FINRA and firms should delete all emails originating from any of these domain names,” it said in the advisory.
FINRA also urged any companies receiving such messages to verify the legitimacy of any suspicious email before responding, opening any attachments, or clicking on any embedded links. It has requested that the relevant Internet domain registrars suspend services for all three domain names.
"For more information, firms should review the resources provided on FINRA’s Cyber Security Topic Page, including the Phishing section of our Report on Cybersecurity Practices – 2018," FINRA added.
Prevent fraud and phishing attacks with DMARC
How to use domain-based message authentication, reporting, and conformance for email security
Earlier in June, FINRA published another advisory warning of similar phishing campaign using the domain name “@gateway-finra.org.” Like the present campaign, this one also asked recipients to click a link to “view request” and provide information to “complete” that request, noting that “late submission may attract penalties.”
In March, the regulator issued an advisory about a phishing campaign using “@finra-online.com” as a fake domain name to catch victims unawares. It said at the time that this domain name was “not connected to FINRA and firms should delete all emails originating from this domain name”.
Finra isn’t the only regulator to be targeted by phishers recently, as the Cyprus Securities and Exchange Commission (CySEC) recently issued a warning about a fake website impersonating them and hosted in India.
Modern governance: The how-to guide
Equipping organisations with the right tools for business resilience
Cloud operational excellence
Everything you need to know about optimising your cloud operations
A buyer’s guide to board management software
How the right software can improve your board’s performance
The real world business value of Oracle autonomous data warehouse
Lead with a 417% five-year ROI
How to boot Windows 11 in Safe Mode
How to speed up Windows 11
Solving cyber security's diversity problem
ITPro is part of Future plc, an international media group and leading digital publisher. Visit our corporate site www.futurenet.com
© Future Publishing Limited, Quay House, The Ambury, Bath BA1 1UA. All rights reserved. England and Wales company registration number 2008885
