Ofgem Energy Bill Rebate Phishing Fraud
ID: 3fbb4b15-03aa-5c14-9aa5-56a6ad77d7ff
STIX ID: report--3fbb4b15-03aa-5c14-9aa5-56a6ad77d7ff
Feed Name: BushidoToken Blog
Threat Score
The report details an Ofgem-themed phishing campaign (May 2022) offering fake energy bill rebates to collect victims' bank and personal details. Multiple similar domains and an email ([email protected]) are listed along with the hosting IP 91.235.116.232 (THCPROJECTS, AS51177); Passive DNS links additional related domains. The campaign is assessed as early-stage but active, with UK bodies (Ofgem, Action Fraud, NCSC) issuing warnings and IOCs shared for defensive action.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.