“Cybercriminals are creating deceptive web addresses (subdomains) to trick users into providing sensitive personal information or login credentials,” officials from the Hawaii Department of Accounting and General Services wrote in a news release Dec. 31.
They listed a dozen hyperlinks impersonating state websites from the departments of Defense; Labor and Industrial Relations; Health; Business, Economic Development and Tourism; and others.
“These sites may appear legitimate and often use ‘AI-native services’ as a lure to encourage users to enter their data,” the news release said.
There have been no reports of compromised state data or information, Diamond Badajos, an information and community relations officer with the Department of Hawaiian Home Lands, said.
Officials with the Hawaii Office of Enterprise Technology Services (ETS), which oversees the state’s technology infrastructure, said ETS had not heard of any new concerns, or received reports of cyber activity following the news release late last month.
"Our goal at ETS is to bring awareness to the public so that an individual would not enter personal information into the codify.inc portal thinking the portal was an official State of Hawaii portal," Glenn L. Dela Cruz, ETS senior communications manager, said in an email, outlining the thinking behind the warning.