How can you recognize Phishing Business Registry and Chambers of Commerce: active campaign in Italy?

Listen to the episode

TLDR

CSIRT Italia has detected a phishing campaign that replicates the Business Registry and Chambers of Commerce portal. Victims receive an email with urgent tones (alleged "third communication") inviting them to update company data via a...

How it works

Red flags

Urgent pressure to click, pay, or share codes immediately.
A link or sender that does not match the official organization.
Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.

What to do

1Links redirecting to non governmental domains (e.g.
2Always verify the domain and certificates before entering company or card data.
3If you have already entered data, contact your bank immediately and monitor transactions; report the incident to CSIRT Italia and to your Chamber of Commerce.

Source

csirt-italia

Source reviewed by Mythos Forensic Team

https://www.acn.gov.it/portale/w/campagna-di-phishing-a-tema-registro-imprese-

FAQ

Is Phishing Business Registry and Chambers of Commerce: active campaign in Italy a real scam pattern?

Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.

What are the first warning signs?

Urgent pressure to click, pay, or share codes immediately.; A link or sender that does not match the official organization.; Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.

What should I do first?

Links redirecting to non governmental domains (e.g.; Always verify the domain and certificates before entering company or card data.; If you have already entered data, contact your bank immediately and monitor transactions; report the incident to CSIRT Italia and to your Chamber of Commerce.

Can LegalAudit check my case?

Yes. Start a free chat and paste the message, link, sender, or payment details for triage.