Situational awareness bulletin: Nebraska toll scam websites located
'Malicious actors' impersonating Nebraska DMV
By Forrest HershbergerThe Nebraska Information Analysis Center (NIAC) is aware of several fictitious websites where cyber actors are impersonating the Nebraska Department of Motor Vehicles to convince victims to pay fictitious tolls.
Malicious actors are using sites that appear visually similar to the official Nebraska Department of Motor Vehicles site to perform fraud. The threat actors are using many URLs that have “nebraska.org-” in the address. All the URLs reported in Nebraska are on the top-level domain “.bond/dmv”.
This is a wide-spread scam tactic that has been seen nationwide. With these fictitious websites, there is generally a concurrent SMSishing attack that directs the victims to the fictitious websites. The malicious texts impersonate either the Department of Transportation or the Department of Motor Vehicles. The texts state that the victim is receiving their final notice before enforcement penalties begin and directs them to the fictitious website.
This scam is projected to continue for the foreseeable future. The identity of the malicious actors, the total impact of these sites, and the outcome of the victims are still unknown.
Current malicious sites that have been reported include: