Secretary of the State Stephanie Thomas on Tuesday warned all state businesses to beware of a malicious email claiming to be from the Connecticut Business Registry.
The email contains a malicious “DottedSign” link that prompts the user to view and sign a digital document, her office said.
The technique tricks users into revealing sensitive information that can include login credentials, money transfers or the download of malware.
Thomas especially warned businesses to not click on any links in the email.
Her office “will never send unsolicited documents for signature,” she said, adding that if something appears suspicious to “trust your instincts and verify before you click.”
She also recommended verifying the sender. Emails from the Office of the Secretary of the State will always come from a @ct.gov email address. Avoid being fooled by similar-looking addresses, such as @cct.gov or @ct-gov.org, she added.
To validate the authenticity of a communication from the Office of the Secretary of the State, contact the Business Services Division at bsd@ct.gov.
