On Wednesday 12 January, 2022, the New Hampshire Information & Analysis Center (NHIAC) became aware of a COVID-19 themed smishing campaign being distributed to New Hampshire citizens. Smishing is the fraudulent practice of sending text messages purporting to be from a reputable company in order to induce individuals to reveal personal information. This information is being shared for situational awareness purposes and to remind the public to NOT share personal information with unknown sites.
In this campaign, the text message contained a link that prompts the receiver to access a fraudulent website entitled “New Hampshire State Covid-19 Vaccine Status Validation” with the ultimate goal of harvesting personal information. Once on the site, the citizen is directed to enter personal information including their social security number, date of birth, and to upload images of their driver’s license. The unknown actor incorporated both NH Department of Health and Human Services and NH Department of Motor Vehicles seals in an attempt to increase the legitimacy of the website.
Initial Text Message
Fraudulent Website
