Over the last several weeks, the NJCCIC has observed an increase in typosquat domains impersonating New Jersey State government agencies. Typosquatting, or domain impersonation, occurs when threat actors register a domain name that visually resembles a trusted organization’s official website. These websites are used by cybercriminals to trick users into providing sensitive information, payment card details, or login credentials. Links to these websites often circulate via email or text message phishing campaigns, or through Search Engine Optimization (SEO)
poisoning. As we approach election season, cyber threat actors may register domains that impersonate official voter registration and election websites.