A Special Mission to Nowhere

July 24, 2025, 9:34 a.m.

Description

A phishing campaign exploiting the aftermath of a military conflict between Israel and Iran has been identified. The scam, using a fake domain 'lineageembraer.online', offers evacuation flights from Tel Aviv to New York on an Embraer Lineage 1000E business jet. The website presents unrealistic pricing and logistical details, aiming to steal personal and financial information from individuals seeking to flee the region. The operation uses fear and urgency tactics, offering seats at $2,166 USD, significantly below market rates for similar flights. The scheme involves a PDF with instructions hosted on a Shopify CDN, raising further suspicions. The campaign demonstrates how threat actors exploit crisis situations to target vulnerable individuals.

Date

  • Created: July 23, 2025, 11:31 p.m.
  • Published: July 23, 2025, 11:31 p.m.
  • Modified: July 24, 2025, 9:34 a.m.

Indicators

  • https://cdn.shopify.com/s/files/1/0945/8889/5563/files/Special_Mission_Flight_Embraer_Lineage_1000E.pdf?v=1750688015

Attack Patterns

Additional Informations

  • Iran, Islamic Republic of
  • Israel
  • United States of America