MSP Important Advisory
CISA has received a tip from a trusted third party regarding a spear phishing campaign targeting K-12 transportation administrators. The unknown threat actor has been seen sending fake Department of Transportation forms requesting that drivers update their information. These forms are prefilled with publicly available information to appear legitimate.
The emails may potentially be sent from trinitymarshall[.]net email addresses, a network associated with these spear phishing emails, but may be sent by other sources.
To report incidents and anomalous activity, please contact either of the following organizations:
- CISA’s Incident Reporting System or through the agency’s 24/7 Operations Center at report@cisa.gov or (888) 282-0870.
- MS- and EI-ISAC, through their 24/7 Operations Center at soc@msisac.org or (866) 787-4722.