A phishing campaign exploits compromised Indiana government email accounts to send fraudulent TxTag toll messages. Attackers use legitimate-looking emails and newly registered look-alike domains to harvest sensitive information through fake payment portals. The breach was linked to a former contractor’s oversight. Officials urge vigilance, emphasizing that legitimate notifications never solicit personal data via email.

Protecting Against Info-Stealers – A Practical Resource
Infostealer malware attacks, designed to extract sensitive information from systems, accounted for nearly a quarter of all cyber incidents in 2024. Cybersecurity reports show a