Five Election‑Season Scams Targeting Voters and Donors
What Happened — Malwarebytes Labs identified five recurring social‑engineering campaigns that surface around U.S. and international elections. The scams use text messages, fake WhatsApp accounts, and counterfeit fundraising emails to lure recipients into “fixing” voter registration, donating to a bogus campaign, or completing a reward‑linked survey. Victims are prompted to click malicious links, download counterfeit apps, or provide personal data that can be weaponized for identity theft or further fraud. The FBI and BBB have issued warnings, noting that the tactics exploit urgency, familiar branding, and the public’s desire to participate in the democratic process. No single breach is reported; the piece catalogs the threat landscape to raise awareness ahead of upcoming elections.
Why It Matters for Trust & Control Assurance — The prevalence of these phishing‑style scams underscores the need for robust security awareness programs that embed control‑assurance practices into everyday user behavior.
Who Is Affected — General public, political campaigns, nonprofit fundraisers, and any organization that communicates with constituents during election cycles.
Recommended Actions — 1) Refresh security awareness training to include election‑themed phishing examples; 2) Deploy email and SMS filtering that flags known election‑related lure language; 3) Verify all political‑related URLs through official election authority sites before clicking; 4) Conduct simulated phishing exercises that mimic the described scams to test and improve user resilience. Source: Malwarebytes Labs
Technical Notes — Attack vectors include SMS phishing (smishing), WhatsApp impersonation, and email spoofing. No CVEs are involved; the threat relies on social engineering rather than software flaws. Source: same article