https://riga.sh/tags/phishing/Recent content in Phishing on RigaHugo 0.125.0en-usWed, 20 Dec 2023 00:00:00 +0000https://riga.sh/investigations/government-phishing/Wed, 20 Dec 2023 00:00:00 +0000https://riga.sh/investigations/government-phishing/Recently, I received quite an unusual phishing email. At first, it looks like a typical delivery phishing, but it came from… a government address! It came from the doctor appointment service from the Serbian Ministry of Health: This domain has no DMARC policy in place, meaning it could be more easily beings used to spread malicious emails. The email is simply an image rendered by HTML, and linked 2 fraudulent files: