A Special Mission to Nowhere
Essential information
- Published
- 23/07/2025 23:31
- Modified
- 24/07/2025 09:34
- Tags
- 2025-07-23 aviation embraer evacuation financial fraud identity theft middle east crisis phishing scam
- Related entities
- 1 observables, 2 techniques (mitre), 3 others
Description
A phishing campaign exploiting the aftermath of a military conflict between Israel and Iran has been identified. The scam, using a fake domain 'lineageembraer.online', offers evacuation flights from Tel Aviv to New York on an Embraer Lineage 1000E business jet. The website presents unrealistic pricing and logistical details, aiming to steal personal and financial information from individuals seeking to flee the region. The operation uses fear and urgency tactics, offering seats at $2,166 USD, significantly below market rates for similar flights. The scheme involves a PDF with instructions hosted on a Shopify CDN, raising further suspicions. The campaign demonstrates how threat actors exploit crisis situations to target vulnerable individuals.