- 양자 컴퓨팅 혁신 가속화… 아이온Q·앨리스앤밥, 기술 성과 공개
- '업무용 애플리케이션 만족한다' 23%에 불과··· AI 기반 개인화 알고리즘이 열쇠
- Preorder the OnePlus Watch 3 now and enjoy several discounts before it becomes available
- How Cybersecurity is Evolving in 2025 to Tackle New Threats
- 5 ways to boost your team's productivity - without relying on generative AI
US FINRA warns US brokerage firms and brokers of ongoing phishing attacks

The US FINRA warns US brokerage firms and brokers of an ongoing phishing campaign impersonating its representatives to steal sensitive info.
The US Financial Industry Regulatory Authority (FINRA) is warning US brokerage firms and brokers of an ongoing phishing campaign. Threat actors are impersonating FINRA officials and are using the threat of penalties to trick victims recipients into providing sensitive information.
The regulator reported that threat actors behind the campaign are using multiple domains (i.e., finrar-reporting[.]org, finpro-finrar[.]org, gateway2-finra[.]org) impersonating the legitimate websites
“FINRA warns member firms of an ongoing phishing campaign that involves fraudulent emails (see sample in Appendix) purporting to be from FINRA” reads the alert published by the authority. “and using one of at least three imposter FINRA domain names:
- “@finrar-reporting.org”
- “@Finpro-finrar.org”
- “@gateway2-finra.org”
The email asks the recipient to click a link to “view request” and provide information to “complete” that request, noting that “late submission may attract penalties.”
The above domains were registered recently, on August 12, through Hosting Concepts B.V. and NameCheap registrars.
Recipients that have clicked on any link or image included in the messages are recommended to immediately notify the appropriate individuals in their organizations.
FINRA recommends brokerage firms and brokers to verify the legitimacy of any suspicious email prior to opening any attachments or clicking on embedded links.
The regulator already requested to the relevant Internet domain registrars to suspend the domain names employed in the attacks.
“For more information, firms should review the resources provided on US Financial Industry Regulatory Authority’s Cybersecurity Topic Page, including the Phishing section of our Report on Cybersecurity Practices – 2018,” the authority adds.
Follow me on Twitter: @securityaffairs and Facebook
Pierluigi Paganini
International Editor-in-Chief
Cyber Defense Magazine