CERT-AGID Reports Fake Traffic-Fine Phishing Campaign Impersonating Police and pagoPA
Summary
CERT-AGID reports a phishing campaign impersonating Italy’s State Police and pagoPA to solicit personal and payment-card details through a fake traffic-fine payment flow. It requested takedowns and shared campaign indicators with accredited organizations.
Key points
- The campaign used fraudulent sites with “poliziadistato” in their domain names but non-official extensions.
- The sites impersonated the State Police and presented a fake restricted area requesting a vehicle plate and the owner’s tax code.
- The flow displayed a purported traffic fine of 42 euros and pressured visitors with a discount for payment within 15 days.
- Fake pagoPA pages requested an email address and payment-card details, including the card number, expiry date, and CVV.
- CERT-AGID requested deactivation of the phishing domains and distributed campaign indicators to accredited organizations.
Article Details
- Event Type
- Phishing campaign impersonating Polizia di Stato and pagoPA to distribute a fake traffic fine.
- Impact
- The fraudulent pages collect vehicle plate and tax-code details, email addresses, and payment-card information. The article reports no confirmed financial losses or number of victims.
MITRE ATT&CK
T1036 · MasqueradingThe fraudulent pages use Polizia di Stato and pagoPA names, logos, and graphics to appear legitimate.T1056.003 · Web Portal CaptureThe fake web forms capture vehicle, identity, contact, and payment-card details.T1204.001 · Malicious LinkVictims are led through the fraudulent web flow to enter personal and payment information.T1566.002 · Spearphishing LinkThe campaign lures victims to fraudulent links and impersonated websites.T1583.001 · DomainsThe article reports malicious domains containing “poliziadistato” with non-official extensions.