The Wisconsin Elections Commission wants local election officials to be aware of an email phishing scam that impersonates the Department of Homeland Security. Here is the alert WEC received:
The Cybersecurity and Infrastructure Security Agency (CISA) is aware of an email phishing scam that tricks users into clicking on malicious attachments that look like legitimate Department of Homeland Security (DHS) notifications. The email campaign uses a spoofed email address to appear like a National Cyber Awareness System (NCAS) alert and lure targeted recipients into downloading malware through a malicious attachment.
CISA encourages users and administrators take the following actions to avoid becoming a victim of social engineering and phishing attacks (http://www.us-cert.gov/ncas/tips/ST04-014):
• Be wary of unsolicited emails, even if the sender appears to be known; attempt to verify web addresses independently (e.g., contact your organization's help desk or search the internet for the main website of the organization or topic mentioned in the email).
• Use caution with email links and attachments without authenticating the sender. CISA will never send NCAS notifications that contain email attachments (https://www.us-cert.gov/ncas/tips/ST04-010).
• Immediately report any suspicious emails to your information technology help desk, security office, or email provider.
If you believe any of your work computers or devices have been compromised, immediately contact your IT department and the Wisconsin Elections Commission’s Help Desk at 608-261-2028 or firstname.lastname@example.org.