Webamon Intel

Webamon reports an active phishing campaign impersonating the U.S. Department of Justice via two typosquatting domains (justice-gov.net, justice-gov.org) that replicate content from justice.gov, digitalgov.gov, and fbi.gov to appear authentic; key IOCs include the malicious domains, WhatsApp number +923503590, and fraudulent emails (supremecourtofmedstate@usfbi.online, help@justice-gov.org), with deceptive tactics such as an altered security banner and contact information divergence used to trick users into submitting sensitive information.