FBI PIN: Spear Phishing Attack Directing Recipients to Download Fake Windows Application Impersonating a Financial Institution

The FBI has published a Private Industry Notification (PIN) advising that it in a recent spear phishing campaign, cyber actors impersonated a U.S.-based financial institution’s brand in an attempt to get recipients to download a Windows application unaffiliated with the financial institution. The unknown cyber actors tailored the campaign to spoof the financial institution through registered domains, email subjects, and an application, all appearing to be related to the institution. This product provides a threat overview and series of recommended mitigations. It also encourages partners to report suspicious or criminal activity to their local FBI field office or the FBI’s 24/7 CyberWatch (CyWatch) at (855)292-3937 or Cy*****@*bi.gov.