Pakistan’s National CERT has warned about a group of fake websites pretending to belong to major government institutions and targeting citizens’ sensitive information.
The National CERT Threat Intelligence Centre detected active phishing websites using the names of NADRA, FBR and HEC. The websites are designed to look like official platforms and can trick users into handing over their login details and other personal information.
One of the identified websites, secure-login-nadra.com, was flagged on October 4 as a malicious domain targeting NADRA users for credential theft. Similar suspicious domains were also found impersonating the Federal Board of Revenue and Higher Education Commission.
National CERT also detected fake websites using the names of several other Pakistani institutions, including the Pakistan Telecommunication Authority, Federal Investigation Agency, Directorate General Immigration & Passports, Securities and Exchange Commission of Pakistan, Benazir Income Support Programme and Prime Minister’s Youth Programme.
The identified domains were classified as active threats, with threat scores between 87 and 99 percent on the National CERT monitoring platform.
Another malicious domain, secure-login-punjabsafecities.com, was found impersonating Punjab Safe Cities and targeting visitors for credential theft.
The National CERT platform showed that the suspicious websites remained active. The domains listed in the monitoring system were registered through NameCheap Inc., highlighting an ongoing campaign that uses the names of trusted institutions to make fraudulent websites appear genuine.
National CERT is continuing to monitor phishing and impersonation attempts targeting organizations.
The authority has advised citizens to be careful when opening links or visiting login pages claiming to belong to government institutions. Users should verify website addresses before entering passwords, account information or other sensitive details and should avoid submitting credentials on unverified platforms.
