TZUTC: -0500
MSGID: 1523.consprcy@1:2320/105 2d37e406
PID: Synchronet 3.21a-Linux master/123f2d28a Jul 12 2025 GCC 12.2.0
TID: SBBSecho 3.28-Linux master/123f2d28a Jul 12 2025 GCC 12.2.0
BBSID: CAPCITY2
CHRS: ASCII 1
FORMAT: flowed
Scammers build fake FBI crime reporting portals to steal personal info - 
warns FBI

Date:
Mon, 22 Sep 2025 16:05:00 +0000

Description:
Someone is spoofing the FBI's IC3 website in an attempt to steal PII, it
warns.

FULL STORY

Fake Internet Crime Complaint (IC3) websites are being used to scam people
into giving away sensitive personal and banking information, according to the
Federal Bureau of Investigation (FBI). 

The bureau recently issued a new public service announcement to warn about 
the malicious landing pages, which are the US governments main hub for
reporting cybercrime. 

It collects complaints about online scams, fraud, identity theft, ransomware,
and other internet-enabled crimes, and then shares it with law enforcement
agencies to help investigate and track digital threats across the country and
globally.

Impersonating the government 

Anyone, be it victims, or third parties, can file a report through IC3s
official website. While not every case gets a direct response, the data helps
the FBI understand broader trends and take action when possible. 

Threat actors create spoofed websites often by slightly altering
characteristics of legitimate website domains, with the purpose of gathering
personally identifiable information entered by a user into the site, 
including name, home address, phone number, email address, and banking
information, the FBI warned. 

For example, spoofed website domains may feature alternate spellings of words
or use an alternative top-level domain to impersonate a legitimate website. 

Members of the public could unknowingly visit spoofed websites while
attempting to find FBI IC3's website to submit an IC3 report. 

Cybercriminals spoof legitimate websites all the time. Fake Google or Amazon
login pages are created to steal the credentials for Workspace or cloud
services . Fraudulent banking homepages are created to trick people into
handing over access to their bank accounts, and social media sites are 
spoofed to access business accounts and propagate malware via paid
advertising. 

These sites are usually paired with a phishing email campaign, which are used
to redirect the victims without raising any suspicion. 

 Via BleepingComputer

======================================================================
Link to news story:
https://www.techradar.com/pro/security/scammers-build-fake-fbi-crime-reporting
-portals-to-steal-personal-info-warns-fbi

$$
--- SBBSecho 3.28-Linux
 * Origin: capitolcityonline.net * Telnet/SSH:2022/HTTP (1:2320/105)
SEEN-BY: 105/81 106/201 128/187 129/14 305 153/7715 154/110 218/700
SEEN-BY: 226/30 227/114 229/110 111 206 300 307 317 400 426 428 470
SEEN-BY: 229/664 700 705 266/512 291/111 320/219 322/757 342/200 396/45
SEEN-BY: 460/58 712/848 902/26 2320/0 105 304 3634/12 5075/35
PATH: 2320/105 229/426