Email from Election Crime Bureau Could Lead Recipients to Believe Email Is from Elections Infrastructure Information Sharing & Analysis Center® (EI-ISAC®)

TLP: CLEAR

Executive Summary

The Center for Internet Security® (CIS) Cyber Threat Intelligence (CTI) team received multiple reports of emails from "Election Crime Bureau" being disseminated that could lead a recipient to believe these emails are from the Elections Infrastructure Information Sharing & Analysis Center® (EI-ISAC®). The emails have a subject line of "Election Integrity Information Sharing and Analysis Center (EI-ISAC)" and come from media[@]ElectionCrimeBureau[.]com.

The body of the email is titled "Election Integrity Information Sharing and Analysis Center (EI-ISAC)" and directs recipients to take a survey purportedly regarding "security of the upcoming 2024 election." The survey link re-directs the recipient to a page asking for personal information including first name, last name, home address, etc. Images of the email body text and survey page are included below.

Email/Survey Images

Copy of fraudulent email that was being used to trick EI-ISAC members.

Copy of fraudulent email that was being used to trick EI-ISAC members.

Indicators

  • media[@]ElectionCrimeBureau[.]com
  • hxxps[://]electioncrimebureau[.]cmail20[.]com/t/y-e-mdtdkjt-hriywdyo-j/
  • hxxps[://]civiclickpetitionhostedpage[.]pages[.]dev/6019

Recommendations

  • Instruct staff to not click on any links in these emails or respond to them.
  • Report suspicious emails to the CIS Security Operations Center ([email protected]).

Get Email Updates When Cyber Threats Like This Arise