FINRA warns of phishing campaign exploiting imposter domain names

The US regulator has requested that domain registrars suspend at least three fraudulent domains

The Financial Industry Regulatory Authority (FINRA) has warned of a new phishing campaign that involves fraudulent emails using domain names pretending to be the financial regulator.

In an advisory, the regulator said that the fake emails used the false domains @finrar-reporting.org, @Finpro-finrar.org and @gateway2-finra.org. The domains were registered on 12 August 2021.

It said that these emails asked recipients to click a link to “view request” and provide information to “complete” that request, noting that “late submission may attract penalties.”

The regulator that anyone who clicked on any link or image in the email should immediately notify the appropriate individuals in their firm of the incident.

“None of these domain names are connected to FINRA and firms should delete all emails originating from any of these domain names,” it said in the advisory.

FINRA also urged any companies receiving such messages to verify the legitimacy of any suspicious email before responding, opening any attachments, or clicking on any embedded links. It has requested that the relevant Internet domain registrars suspend services for all three domain names.

"For more information, firms should review the resources provided on FINRA’s Cyber Security Topic Page, including the Phishing section of our Report on Cybersecurity Practices - 2018," FINRA added.

Related Resource

Prevent fraud and phishing attacks with DMARC

How to use domain-based message authentication, reporting, and conformance for email security

Prevent fraud and phishing attacks with DMARC - whitepaper from MimecastFree download

Earlier in June, FINRA published another advisory warning of similar phishing campaign using the domain name “@gateway-finra.org.” Like the present campaign, this one also asked recipients to click a link to “view request” and provide information to “complete” that request, noting that “late submission may attract penalties.”

In March, the regulator issued an advisory about a phishing campaign using “@finra-online.com” as a fake domain name to catch victims unawares. It said at the time that this domain name was “not connected to FINRA and firms should delete all emails originating from this domain name”.

Finra isn’t the only regulator to be targeted by phishers recently, as the Cyprus Securities and Exchange Commission (CySEC) recently issued a warning about a fake website impersonating them and hosted in India.

Featured Resources

How virtual desktop infrastructure enables digital transformation

Challenges and benefits of VDI

Free download

The Okta digital trust index

Exploring the human edge of trust

Free download

Optimising workload placement in your hybrid cloud

Deliver increased IT agility with the cloud

Free Download

Modernise endpoint protection and leave your legacy challenges behind

The risk of keeping your legacy endpoint security tools

Download now

Recommended

Russia's "politically motivated" REvil raid could be used as leverage, experts warn
ransomware

Russia's "politically motivated" REvil raid could be used as leverage, experts warn

17 Jan 2022
Meta files lawsuit to uncover hackers targeting Facebook, WhatsApp
phishing

Meta files lawsuit to uncover hackers targeting Facebook, WhatsApp

21 Dec 2021
Five things to consider before choosing an MFA solution
Security

Five things to consider before choosing an MFA solution

17 Dec 2021
Australia and US sign CLOUD Act data-sharing deal to support criminal investigations
cyber crime

Australia and US sign CLOUD Act data-sharing deal to support criminal investigations

16 Dec 2021

Most Popular

How to move Microsoft's Windows 11 from a hard drive to an SSD
Microsoft Windows

How to move Microsoft's Windows 11 from a hard drive to an SSD

4 Jan 2022
How to boot Windows 11 in Safe Mode
Microsoft Windows

How to boot Windows 11 in Safe Mode

6 Jan 2022
Microsoft Exchange servers break thanks to 'Y2K22' bug
email delivery

Microsoft Exchange servers break thanks to 'Y2K22' bug

4 Jan 2022