Email from Election Crime Bureau Could Lead Recipients to Believe Email Is from Elections Infrastructure Information Sharing & Analysis Center® (EI-ISAC®)
TLP: CLEAR
Executive Summary
The Center for Internet Security® (CIS) Cyber Threat Intelligence (CTI) team received multiple reports of emails from "Election Crime Bureau" being disseminated that could lead a recipient to believe these emails are from the Elections Infrastructure Information Sharing & Analysis Center® (EI-ISAC®). The emails have a subject line of "Election Integrity Information Sharing and Analysis Center (EI-ISAC)" and come from media[@]ElectionCrimeBureau[.]com.
The body of the email is titled "Election Integrity Information Sharing and Analysis Center (EI-ISAC)" and directs recipients to take a survey purportedly regarding "security of the upcoming 2024 election." The survey link re-directs the recipient to a page asking for personal information including first name, last name, home address, etc. Images of the email body text and survey page are included below.
Email/Survey Images
Indicators
- media[@]ElectionCrimeBureau[.]com
- hxxps[://]electioncrimebureau[.]cmail20[.]com/t/y-e-mdtdkjt-hriywdyo-j/
- hxxps[://]civiclickpetitionhostedpage[.]pages[.]dev/6019
Recommendations
- Instruct staff to not click on any links in these emails or respond to them.
- Report suspicious emails to the CIS Security Operations Center ([email protected]).