Compromised Italian PEC Accounts Spread PagoPA Phishing With Fake Traffic Fines
CERT-AgID identified multiple phishing campaigns using compromised Italian certified email (PEC) accounts to send fraudulent traffic-fine payment requests impersonating PagoPA. One message demanded €198 by October 27, threatening an increase to €268 after the deadline, and linked to a lookalike payment page hosted under a .ru domain. The fraudulent site requested personal information and payment-card details, exploiting the perceived legitimacy of certified email and public-sector payment services. The phishing page polled a server-side management panel every half second for instructions to direct victims to additional screens, potentially including prompts for card details and banking verification codes. CERT-AgID contacted the affected PEC providers and reported detecting 1,874 phishing campaigns abusing the PagoPA and SEND names since April 21, 2025. Organizations should treat unexpected payment demands as untrusted even when delivered through PEC, verify fines through official channels, and warn users against entering payment details or verification codes on linked sites.. Fonte: https://mallory.ai/stories/01a17cab-5e22-7c04-9f4d-98e29b54e567
Itagora tiene in archivio titolo e sommario per la ricerca interna. Il testo completo resta sulla fonte. Il link in uscita non invia referrer.