Trust in Government (Websites)
Over the last several weeks, the NJCCIC has observed an increase in typosquat domains impersonating New Jersey State government agencies. Typosquatting, or domain impersonation, occurs when threat actors register a domain name that visually resembles a trusted organization’s official website. These websites are used by cybercriminals to trick users into providing sensitive information, payment card details, or login credentials. Links to these websites often circulate via email or text message phishing campaigns, or through Search Engine Optimization (SEO) poisoning. As we approach election season, cyber threat actors may register domains that impersonate official voter registration and election websites.
Recommendations
  • Visit official government websites, looking for .gov at the end of URLs.
  • Visit vote.nj.gov for election and voter registration information.
  • Avoid clicking links and opening attachments in unsolicited emails.
  • Users should only submit account credentials on official websites.
  • Confirm requests from senders via contact information obtained from verified and official sources.