Department of Education Site Mimicked in Phishing Scheme

BforeAI's PreCrime Labs detailed an active phishing campaign that spoofs the U.S. Department of Education's G5 grant-management portal via multiple lookalike domains, Cloudflare fronting, JavaScript credential exfiltration, and browser cloaking to harvest credentials from schools, grant administrators, and vendors; researchers notified the DoE, flagged malicious domains, shared indicators with partners, and recommended verifying URLs and reporting suspicious emails.