Connecticut Secretary of State Stephanie Thomas is warning businesses across the state about a phishing email impersonating the Connecticut Business Registry, designed to steal sensitive information.
Scam Details
The “malicious email” appears to come from the Connecticut Business Registry and includes a DottedSign link prompting recipients to view and sign a digital document. The link can trick users into revealing sensitive information, including sharing their login credentials, transferring money, or downloading malware onto their devices, officials said.
Thomas said, “Cybercriminals are getting more sophisticated, and it’s critical that businesses stay alert. Our office will never send unsolicited documents for signature. If something feels off, trust your instincts and verify before you click.”
The Office of the Secretary of the State said official emails will always come from a @ct.gov email address. However, the office cautioned that scammers often use lookalike domains that closely resemble legitimate government email addresses, such as @cct.gov or @ct-gov.org.
Businesses that receive a suspicious email claiming to be from the Office of the Secretary of the State can contact the Business Services Division at [email protected] to verify whether the communication is legitimate.
Original reporting: NBC Connecticut (Hartford) — read the source article.