Carbon Rebate Lure used in Phishing Campaign

Oct 11, 2024
phish sms interac


Carbon Rebate Lure used in Phishing Campaign

We received a fraudulent SMS message purporting to be an INTERAC transfer related to the Canada Carbon Rebate. The domain contains the term "securedeposit" but ends in the notorious domain suffix ".cdf" which should help users determine that this is a scam. 

CRA has some resources available to help identify these types of messages.

IOCs

securedeposit[.]cfd
45.134.37[.]86

[ IOC Details]