Scammers pose as political activists to play partisan

Hackers are exploiting the partisan divide in the US to lure Americans into clicking on phishing emails, according to new research.

An “extensive and coordinated” phishing campaign was identified in July and August in which hackers sent emails impersonating the progressive advocacy group MoveOn. One of those emails asked recipients, “Will you sign the petition to demand that Fox News address and STOP the racism and sexism in their election coverage against Kamala Harris.” A link in the emails redirected potential respondents to a website associated with a malware program called “SocGholish,” according to a report by cybersecurity firm ReliaQuest.

As the November election approaches, hackers have sought to capitalize on voter engagement and have created duplicate campaign websites to try to further their schemes. Aside from subtle spelling mistakes, the fraudulent websites are otherwise identical to legitimate campaign pages, according to ReliaQuest researchers, who have uncovered more than 500 fake websites designed to lure and deceive voters. Some of these pages requested victims’ cryptocurrencies, the researchers found.

While there were no signs that customer accounts were compromised, the findings show the persistent threat from election-themed phishing emails. The notorious Russian cybercrime group Evil Corp., whose suspected members are under US sanctions, is linked to the SocGholish malware, according to cyber firm Red Canary Inc.

“We are aware of attempts to misuse our brand and platforms for these purposes, and we continue to regularly consult with security experts and cooperate with law enforcement to respond and protect our organization, staff and members,” it said. a MoveOn spokesperson said in a statement.

Photo: Photographer: Sem van der Wal/AFP/Getty Images

Copyright 2024 Bloomberg.