Security News > 2021 > June > US brokerage firms warned of 'FINRA Support' phishing attacks

US securities industry regulator FINRA is warning brokerage firms of an ongoing phishing attack pretending to be from 'FINRA Support.
FINRA is a government-authorized non-profit organization that regulates all exchange markets and securities firms publicly active in the United States.
FINRA began warning brokers yesterday that a phishing campaign is sending emails pretending to be from 'FINRA Support' but are coming from a third-party domain.
" - FINRA. Since the 'westour.org' domain is not connected to FINRA, brokerage firms are urged to delete any emails they receive from this domain.
In June, FINRA warned brokerage firms that members of attackers used penalty threats as lures to get brokers to respond to the email.
Even though FINRA requested that domains associated with these attacks be deleted, many domains continue to be registered at various Internet registrars.
News URL
Related news
- Ransomware gangs pose as IT support in Microsoft Teams phishing attacks (source)
- Microsoft Teams phishing attack alerts coming to everyone next month (source)
- How to Prevent Phishing Attacks with Multi-Factor Authentication (source)
- Hacker pleads guilty to SIM swap attack on US SEC X account (source)
- US indicts 8Base ransomware operators for Phobos encryption attacks (source)
- Critical PostgreSQL bug tied to zero-day attack on US Treasury (source)
- Microsoft: Hackers steal emails in device code phishing attacks (source)
- Darktrace: 96% of Phishing Attacks in 2024 Exploited Trusted Domains Including SharePoint & Zoom Docs (source)
- Phishing attack hides JavaScript using invisible Unicode trick (source)
- FatalRAT Phishing Attacks Target APAC Industries Using Chinese Cloud Services (source)