Brokerage Firms Warned by FINRA Regulator of New Phishing Attack

Minimalist · Feb 15, 2019

The Financial Industry Regulatory Authority (FINRA) has issued an information notice to brokerage firms regarding an ongoing phishing attack which currently targets member firms with malicious spam e-mails.
Click to expand...

https://www.bleepingcomputer.com/ne...ed-by-finra-regulator-of-new-phishing-attack/

guest · Oct 7, 2020

US brokerage firms warned of widespread survey phishing attacks
October 7, 2020
https://www.bleepingcomputer.com/ne...warned-of-widespread-survey-phishing-attacks/

The U.S. Financial Industry Regulatory Authority (FINRA) has issued a notice warning member brokerage firms of widespread phishing attacks using surveys to harvest information.
Phishing emails sent from fake FINRA domain name
The financial industry regulator said that the phishing messages are being sent from a fake FINRA domain and made to look like they were being sent by FINRA.

"The email was sent from the domain '@regulation-finra.org' and was preceded by 'info' followed by a number, e.g., info5@regulation-finra.org," the regulator said.
"FINRA recommends that anyone who clicked on any link or image in the email immediately notify the appropriate individuals in their firm of the incident."
Click to expand...

guest · Dec 2, 2020

Phishing targets US brokerage firms using FINRA lookalike domain
December 2, 2020
https://www.bleepingcomputer.com/ne...brokerage-firms-using-finra-lookalike-domain/

US securities industry regulator FINRA warned brokerage firms earlier this week of ongoing phishing attacks using a recently registered web domain spoofing a legitimate FINRA website.
Malicious domain mimics a FINRA official site

"FINRA warns member firms of an ongoing phishing campaign that involves fraudulent emails that include the domain '@invest-finra.org'." the stock market regulator said.
Since the domain is not connected in any way with FINRA, member brokerage firms are advised to immediately delete any and all emails received from this domain.

"FINRA reminds firms to verify the legitimacy of any suspicious email prior to responding to it, opening any attachments or clicking on any embedded links," the alert adds.
Click to expand...

guest · Jun 24, 2021

US brokerage firms warned of 'FINRA Support' phishing attacks
June 24, 2021
https://www.bleepingcomputer.com/ne...rms-warned-of-finra-support-phishing-attacks/

US securities industry regulator FINRA is warning brokerage firms of an ongoing phishing attack pretending to be from 'FINRA Support.'
Phishing emails impersonate FINRA support
FINRA began warning brokers yesterday that a phishing campaign is sending emails pretending to be from 'FINRA Support' but are coming from a third-party domain.

"FINRA warns member firms of an ongoing phishing campaign that involves fraudulent emails (see sample in Appendix) purporting to be from “FINRA SUPPORT” with the email address “support@westour.org”.

"The email asks the recipient to pay attention “to the report attached below that requires your immediate response” and states that “[t]he attachment contains our updated Public Policy information.” The emails may not include an attachment." - FINRA
Click to expand...

Since the 'westour.org' domain is not connected to FINRA, brokerage firms are urged to delete any emails they receive from this domain. If they clicked on any links or opened attachments, they should immediately report the incident to their network admins.

FINRA has asked NameCheap, the Internet domain registrar used to register this domain on 5/27/21, to suspend the westour.org domain.
Click to expand...

guest · Aug 14, 2021

US brokers warned of ongoing phishing attacks impersonating FINRA
August 14, 2021
https://www.bleepingcomputer.com/ne...ongoing-phishing-attacks-impersonating-finra/

The US Financial Industry Regulatory Authority (FINRA) warns US brokerage firms and brokers of an ongoing phishing campaign impersonating FINRA officials and asking them to hand over sensitive information under the threat of penalties.
Impersonated FINRA domain names used for phishing
In a notice issued on Friday, the US financial industry regulator said that the phishing messages are being sent from multiple domains impersonating FINRA official sites.

FINRA says that the attackers are using at least three different domains in this campaign (i.e., finrar-reporting[.]org, finpro-finrar[.]org, gateway2-finra[.]org).

"The email asks the recipient to click a link to 'view request' and provide information to 'complete' that request, noting that 'late submission may attract penalties'," the regulatory notice reads.
Click to expand...

Log in or Sign up

Brokerage Firms Warned by FINRA Regulator of New Phishing Attack

Minimalist Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Brokerage Firms Warned by FINRA Regulator of New Phishing Attack

Minimalist Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches