{"id":3940,"date":"2023-02-08T07:54:38","date_gmt":"2023-02-08T07:54:38","guid":{"rendered":"https:\/\/shreshtait.com\/blog\/?p=3940"},"modified":"2025-09-30T11:47:58","modified_gmt":"2025-09-30T06:17:58","slug":"phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink","status":"publish","type":"post","link":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\/","title":{"rendered":"Phishing campaign targeting Indiana Department of Workforce Development\u2019s (DWD) Uplink"},"content":{"rendered":"\n<p>On the <a href=\"https:\/\/shreshtait.com\/blog\/2023\/01\/phishing-targeting-indiana-department-of-workforce-development\/\" target=\"_blank\" rel=\"noreferrer noopener\">21st of January<\/a>, security researchers at <a href=\"https:\/\/shreshtait.com\" target=\"_blank\" rel=\"noreferrer noopener\">Shreshta<\/a>, had uncovered a phishing website impersonating the Indiana Department of Workforce Uplink website. During further investigations, we discovered a more extensive phishing campaign.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-get-free-access-to-newly-registered-domain-names-nrd-community-feeds\">Get free access to Newly registered domain names (NRD) community feeds<\/h2>\n\n\n\n<p><a href=\"https:\/\/shreshtait.com\/blog\/2024\/01\/what-are-newly-registered-domain-names\/\" target=\"_blank\" rel=\"noreferrer noopener\">Newly registered domain names<\/a> or recently registered domains can be a potential security risk for organisations. They are often used to host phishing, malware, and other malicious content.<\/p>\n\n\n\n<p>By monitoring or blocking NRDs, enterprises can eliminate the risk of cyber threats posed by NRDs.<\/p>\n\n\n\n<p>Get no-cost access to our newly registered domain names(NRD) community feeds.<\/p>\n\n\n\n<p><a href=\"https:\/\/shreshtait.com\/blog\/2024\/02\/recently-registered-domains-download\/\" target=\"_blank\" rel=\"noreferrer noopener\">Download the free NRD community feeds<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-about-indiana-department-of-workforce-development-s-dwd\">About Indiana Department of Workforce Development\u2019s (DWD)<\/h3>\n\n\n\n<p>Uplink is the name of the Indiana Department of Workforce Development\u2019s automated self-service unemployment Insurance system.<\/p>\n\n\n\n<p>The Uplink claimant self-service system enables users to receive improved customer service and reduces the time needed for processing unemployment insurance claims.<sup><a href=\"https:\/\/www.in.gov\/dwd\/indiana-unemployment\/individuals\/uplink-faq\/\" target=\"_blank\" rel=\"noreferrer noopener\">1<\/a><\/sup><\/p>\n\n\n\n<h5 class=\"wp-block-heading\" id=\"h-phishing-page-1-www-gov-indianauplink-site-impersonating-dwd\">Phishing page #1 &#8211;  www[.]gov[.]indianauplink[.]site impersonating DWD<\/h5>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"648\" height=\"700\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/Screenshot-from-2023-01-31-12-50-20.png\" alt=\"Phishing website of Indiana Department of Workforce Development (DWD)\" class=\"wp-image-3942\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/Screenshot-from-2023-01-31-12-50-20.png 648w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/Screenshot-from-2023-01-31-12-50-20-278x300.png 278w\" sizes=\"auto, (max-width: 648px) 100vw, 648px\" \/><figcaption class=\"wp-element-caption\">Image \u2013 screenshot of www[.]gov[.]indianauplink[.]site phishing website<\/figcaption><\/figure>\n\n\n\n<h5 class=\"wp-block-heading\" id=\"h-the-forget-username-and-forget-password-links-on-the-phishing-website-www-gov-indianauplink-site-are-non-functional\">The &#8220;forget username&#8221; and &#8220;forget password&#8221; links on the phishing website www[.]gov[.]indianauplink[.]site are non-functional<\/h5>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"374\" height=\"372\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/Screenshot-from-2023-01-31-12-56-05.png\" alt=\"Phishing website of Indiana Department of workforce Development showing the Login screen\" class=\"wp-image-3944\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/Screenshot-from-2023-01-31-12-56-05.png 374w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/Screenshot-from-2023-01-31-12-56-05-300x298.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/Screenshot-from-2023-01-31-12-56-05-150x150.png 150w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/Screenshot-from-2023-01-31-12-56-05-70x70.png 70w\" sizes=\"auto, (max-width: 374px) 100vw, 374px\" \/><figcaption class=\"wp-element-caption\">Image &#8211; screenshot of www[.]gov[.]indianauplink[.]site phishing websites login section<\/figcaption><\/figure>\n\n\n\n<h5 class=\"wp-block-heading\" id=\"h-the-phishing-website-www-gov-indianauplink-site-accepts-false-login-details-and-redirects-to-a-two-factor-authentication-page\">The phishing website www[.]gov[.]indianauplink[.]site accepts false login details and redirects to a Two-factor authentication page<\/h5>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"374\" height=\"372\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/Screenshot-from-2023-01-31-12-59-14.png\" alt=\"Phishing website of Indiana Department of workforce Development showing the Login screen\" class=\"wp-image-3947\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/Screenshot-from-2023-01-31-12-59-14.png 374w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/Screenshot-from-2023-01-31-12-59-14-300x298.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/Screenshot-from-2023-01-31-12-59-14-150x150.png 150w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/Screenshot-from-2023-01-31-12-59-14-70x70.png 70w\" sizes=\"auto, (max-width: 374px) 100vw, 374px\" \/><figcaption class=\"wp-element-caption\">Image \u2013 screenshot of the login section in the phishing webpage<\/figcaption><\/figure>\n\n\n\n<h5 class=\"wp-block-heading\" id=\"h-the-two-factor-authentication-page-on-www-gov-indianauplink-site-accepts-false-access-code\">The Two-factor authentication page on www[.]gov[.]indianauplink[.]site accepts false access code<\/h5>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"505\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/Screenshot-from-2023-01-31-13-05-19-1024x505.png\" alt=\"Phishing page of Indiana Department of Workforce  showing two-factor authentication  \" class=\"wp-image-3950\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/Screenshot-from-2023-01-31-13-05-19-1024x505.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/Screenshot-from-2023-01-31-13-05-19-300x148.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/Screenshot-from-2023-01-31-13-05-19-768x379.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/Screenshot-from-2023-01-31-13-05-19-1536x757.png 1536w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/Screenshot-from-2023-01-31-13-05-19.png 1600w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Image \u2013 Screenshot of www[.]gov[.]indianauplink[.]site\/auth.php page of the phishing website<\/figcaption><\/figure>\n\n\n\n<h5 class=\"wp-block-heading\" id=\"h-threat-indicators\">Threat Indicators<\/h5>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The domain name www[.]gov[.]indianauplink[.]site was registered by PDR Ltd. d\/b\/a PublicDomainRegistry.com&nbsp; &nbsp;&nbsp;<\/li>\n\n\n\n<li>Domain name registration date \u2013 08-01-2023<\/li>\n\n\n\n<li>The website domain name resolves to the IP address 198.12.125.130<\/li>\n\n\n\n<li>The IP address 198.12.125.130 belongs to AS36352 (ColoCrossing)<\/li>\n\n\n\n<li>The website accepts any login credentials, regardless of their legitimacy.<\/li>\n\n\n\n<li>The phishing website has links that redirect to the official website of the Indiana State Government<sup><a href=\"https:\/\/www.in.gov\/dwd\/\" target=\"_blank\" rel=\"noreferrer noopener\">1<\/a><\/sup><\/li>\n<\/ul>\n\n\n\n<h5 class=\"wp-block-heading\" id=\"h-phishing-website-2-www-uplink-gov-in-in-impersonating-dwd\">Phishing website #2 &#8211; www[.]uplink[.]gov-in[.]in impersonating DWD<\/h5>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"595\" height=\"699\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/phishing-page-2.png\" alt=\"Phishing website  of Indiana Department of Workforce\" class=\"wp-image-3964\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/phishing-page-2.png 595w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/phishing-page-2-255x300.png 255w\" sizes=\"auto, (max-width: 595px) 100vw, 595px\" \/><figcaption class=\"wp-element-caption\">Image \u2013 screenshot of www[.]uplink[.]gov-in[.]in phishing website<\/figcaption><\/figure>\n\n\n\n<h5 class=\"wp-block-heading\" id=\"h-the-forget-username-and-forget-password-links-on-the-phishing-website-www-uplink-gov-in-in-are-non-functional\">The &#8220;forget username&#8221; and &#8220;forget password&#8221; links on the phishing website www[.]uplink[.]gov-in[.]in are non-functional<\/h5>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"372\" height=\"298\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/loginss.png\" alt=\"Phishing website of Indiana Department of workforce Development showing the Login screen\" class=\"wp-image-3966\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/loginss.png 372w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/loginss-300x240.png 300w\" sizes=\"auto, (max-width: 372px) 100vw, 372px\" \/><figcaption class=\"wp-element-caption\">Image &#8211; screenshot of www[.]uplink[.]gov-in[.]in phishing websites login section<\/figcaption><\/figure>\n\n\n\n<h5 class=\"wp-block-heading\" id=\"h-the-two-factor-authentication-page-on-www-uplink-gov-in-in-does-not-accept-false-access-code\">The Two-factor authentication page on www[.]uplink[.]gov-in[.]in does not accept false access code<\/h5>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"460\" height=\"445\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/loginerror.png\" alt=\"The phishing page of Indiana Department of workforce Development showing the two factor authentication\" class=\"wp-image-3968\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/loginerror.png 460w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/loginerror-300x290.png 300w\" sizes=\"auto, (max-width: 460px) 100vw, 460px\" \/><figcaption class=\"wp-element-caption\">Image \u2013 screenshot of the login section in the phishing webpage<\/figcaption><\/figure>\n\n\n\n<h5 class=\"wp-block-heading\" id=\"h-the-two-factor-authentication-page-on-www-uplink-gov-in-in-does-not-accept-false-access-code-0\">The Two-factor authentication page on www[.]uplink[.]gov-in[.]in does not accept false access code<\/h5>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"561\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/2AFcode-error-1024x561.png\" alt=\"The phishing page of Indiana Department of workforce Development showing the two factor authentication\" class=\"wp-image-3953\" style=\"width:768px;height:420px\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/2AFcode-error-1024x561.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/2AFcode-error-300x164.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/2AFcode-error-768x421.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/2AFcode-error-1536x842.png 1536w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/2AFcode-error.png 1598w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Image \u2013 Screenshot of https:\/\/www[.]uplink[.]gov-in[.]in\/CSSLogon.html\/Logon2FA page of the phishing websites<\/figcaption><\/figure>\n\n\n\n<h5 class=\"wp-block-heading\" id=\"h-threat-indicators-0\">Threat Indicators<\/h5>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The domain name www[.]uplink[.]gov-in[.]in was registered by Own Web Solution Pvt. Ltd.<\/li>\n\n\n\n<li>Domain name registration date \u2013 11-01-2023<\/li>\n\n\n\n<li>The domain name www[.]uplink[.]gov-in[.]in resolves to the IP address 198.12.125.130<\/li>\n\n\n\n<li>The IP address 198.12.125.130 belongs to AS36352 (ColoCrossing)<\/li>\n\n\n\n<li>The phishing website has links that redirect to the official website of the Indiana State Government<sup><a href=\"\/\/www.in.gov\/dwd\/\" target=\"_blank\" rel=\"noreferrer noopener\">1<\/a><\/sup><\/li>\n\n\n\n<li>The phishing website accepts false login details randomly and redirects the user to the two-factor authentication page<\/li>\n\n\n\n<li>The phishing website www[.]uplink[.]gov-in[.]in is an improvement over the prior one www.gov.indianauplink.site, utilising error displays to convince the user they are accessing a legitimate site<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-motive\">Motive<\/h2>\n\n\n\n<p>The motive of the attackers is to harvest the Personally Identifiable Information (PII) of the user:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Complete name and address<\/li>\n\n\n\n<li>Social Security Number<\/li>\n\n\n\n<li>Personal Identification (demographics such as date of birth, Etc.)<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-indicators-of-compromise\">Indicators of Compromise<\/h2>\n\n\n\n<p>indianuplinks[.]online<br>www.gov[.]indianuplinks[.]online<br>gov[.]indianuplinks[.]online<br>govs[.]indianuplinks[.]online<br>gov-in[.]in<br>up.ink.gov-in[.]in<br>upiink.gov-in[.]in<br>www.upiink.gov-in[.]in<br>up.lnk.gov-in[.]in<br>www.up.ink.gov-in[.]in<br>www.uplink.gov-in[.]in<br>uplnk.gov-in[.]in<br>uplink.gov-in[.]in<br>www.uplnk.gov-in[.]in<br>www.up.lnk.gov-in[.]in<br>www.upink.gov-in[.]in<br>upink.gov-in[.]in<br>uplink-gov-ui[.]in<br>mail.uplink-gov-ui[.]in<br>govs.indianauplink[.]site<br>www.gov.indianauplink[.]site<br>mail.indianauplink[.]site<br>indianauplink[.]site<br>www.govs.indianauplink[.]site<br>gov.indianauplink[.]site<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-indicators-of-compromise-domain-names-currently-not-resolving-or-content-removed\">Indicators of Compromise &#8211; domain names currently not resolving or content removed<\/h2>\n\n\n\n<p>in-uplink-gov[.]com<br>govs-claimant[.]online<br>uplink.in.gov-t[.]in<br>gov-t[.]in<br>www[.]upiink[.]ln[.]gov-t[.]in<br>www[.]uplink[.]in[.]gov-t[.]in<br>upiink[.]ln[.]gov-t[.]in<br>govs[.]indianaswork-forces[.]online<br>gov.indianaswork-forces[.]online<br>govt.indianaswork-forces[.]online<br>www[.]uplinkswork-ones.online[.]indianaswork-forces[.]online<br>indianaswork-forces[.]online<br>www.gov.indianaswork-forces[.]online<br>www.govns.indianaswork-forces[.]online<br>www.govs.indianaswork-forces[.]online<br>govn.indianaswork-forces[.]online<br>uplinkswork-ones.online.indianaswork-forces[.]online<br>mail.indianaswork-forces[.]online<br>govns.indianaswork-forces[.]online<br>www.govts.indianaswork-forces[.]online<br>www.govt.indianaswork-forces[.]online<br>www.govn.indianaswork-forces[.]online<br>govs.uplinkswork-ones[.]online<br>www.gov.uplinkswork-ones[.]online<br>uplinkswork-ones[.]online<br>www.indiana.uplinkswork-ones[.]online<br>gov.uplinkswork-ones[.]online<br>www.govs.uplinkswork-ones[.]online<br>indiana.uplinkswork-ones[.]online<\/p>\n","protected":false},"excerpt":{"rendered":"<p>On the 21st of January, security researchers at Shreshta, had uncovered a phishing website impersonating the Indiana Department of Workforce Uplink website. During further investigations, we discovered a more extensive phishing campaign. Get free access to Newly registered domain names (NRD) community feeds Newly registered domain names or recently registered domains can be a potential [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":4245,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[42],"tags":[50,45,75,68,76,67,48,47,69],"class_list":["post-3940","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-threat-intelligence","tag-campaign","tag-dns","tag-domain-name","tag-dwd","tag-india","tag-indiana","tag-phishing","tag-threat-intelligence","tag-united-states"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.0 (Yoast SEO v27.3) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Phishing campaign Indiana Department of Workforce Development<\/title>\n<meta name=\"description\" content=\"Security researchers at\u00a0Shreshta IT, have identified a phishing campaign targeting Indiana Department of Workforce Development\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Phishing campaign targeting Indiana Department of Workforce Development\u2019s (DWD) Uplink\" \/>\n<meta property=\"og:description\" content=\"Security researchers at\u00a0Shreshta IT, have identified a phishing campaign targeting Indiana Department of Workforce Development\" \/>\n<meta property=\"og:url\" content=\"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\/\" \/>\n<meta property=\"og:site_name\" content=\"DNS Security &amp; Threat Intelligence Blog | Shreshta\" \/>\n<meta property=\"article:published_time\" content=\"2023-02-08T07:54:38+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-09-30T06:17:58+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/pswapneel_Create_an_abstract_generative_art_piece_that_captures_7a4213a7-fe00-4500-ae5c-83edc2d44ed8.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"896\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Pranay Patil\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@shreshtait\" \/>\n<meta name=\"twitter:site\" content=\"@shreshtait\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Pranay Patil\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2023\\\/02\\\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2023\\\/02\\\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\\\/\"},\"author\":{\"name\":\"Pranay Patil\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#\\\/schema\\\/person\\\/675cf497a40c89e71d50bbac3e1288b6\"},\"headline\":\"Phishing campaign targeting Indiana Department of Workforce Development\u2019s (DWD) Uplink\",\"datePublished\":\"2023-02-08T07:54:38+00:00\",\"dateModified\":\"2025-09-30T06:17:58+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2023\\\/02\\\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\\\/\"},\"wordCount\":725,\"publisher\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2023\\\/02\\\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/02\\\/pswapneel_Create_an_abstract_generative_art_piece_that_captures_7a4213a7-fe00-4500-ae5c-83edc2d44ed8.png\",\"keywords\":[\"campaign\",\"dns\",\"domain name\",\"dwd\",\"india\",\"indiana\",\"phishing\",\"threat intelligence\",\"united states\"],\"articleSection\":[\"Threat Intelligence\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2023\\\/02\\\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\\\/\",\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2023\\\/02\\\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\\\/\",\"name\":\"Phishing campaign Indiana Department of Workforce Development\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2023\\\/02\\\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2023\\\/02\\\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/02\\\/pswapneel_Create_an_abstract_generative_art_piece_that_captures_7a4213a7-fe00-4500-ae5c-83edc2d44ed8.png\",\"datePublished\":\"2023-02-08T07:54:38+00:00\",\"dateModified\":\"2025-09-30T06:17:58+00:00\",\"description\":\"Security researchers at\u00a0Shreshta IT, have identified a phishing campaign targeting Indiana Department of Workforce Development\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2023\\\/02\\\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2023\\\/02\\\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2023\\\/02\\\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\\\/#primaryimage\",\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/02\\\/pswapneel_Create_an_abstract_generative_art_piece_that_captures_7a4213a7-fe00-4500-ae5c-83edc2d44ed8.png\",\"contentUrl\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/02\\\/pswapneel_Create_an_abstract_generative_art_piece_that_captures_7a4213a7-fe00-4500-ae5c-83edc2d44ed8.png\",\"width\":1344,\"height\":896,\"caption\":\"Phishing website targeting Indiana Department of Workforce Development\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2023\\\/02\\\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Phishing campaign targeting Indiana Department of Workforce Development\u2019s (DWD) Uplink\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/\",\"name\":\"DNS Security &amp; Threat Intelligence Blog | Shreshta\",\"description\":\"DNS Security &amp; Threat Intelligence\",\"publisher\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#organization\",\"name\":\"Shreshta IT Technologies Pvt. Ltd.\",\"alternateName\":\"Shreshta\",\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Shreshta.svg\",\"contentUrl\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Shreshta.svg\",\"width\":330,\"height\":76,\"caption\":\"Shreshta IT Technologies Pvt. Ltd.\"},\"image\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/shreshtait\",\"https:\\\/\\\/infosec.exchange\\\/@shreshta\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/shreshta\\\/\"],\"description\":\"DNS security and threat intelligence company providing real-time threat protection for organizations worldwide. Our solutions include DNS Shield (Protective DNS), DNS Watchtower (Passive DNS), and comprehensive threat intelligence feeds. Trusted by enterprises to detect, prevent, and investigate cyber threats at the DNS layer.\",\"email\":\"sales@shreshtait.com\",\"legalName\":\"Shreshta IT Technologies Pvt. Ltd.\",\"foundingDate\":\"2014-01-22\",\"numberOfEmployees\":{\"@type\":\"QuantitativeValue\",\"minValue\":\"11\",\"maxValue\":\"50\"},\"publishingPrinciples\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/blog\\\/\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#\\\/schema\\\/person\\\/675cf497a40c89e71d50bbac3e1288b6\",\"name\":\"Pranay Patil\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/Screenshot-2023-01-27-at-11.09.13-PM.png\",\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/Screenshot-2023-01-27-at-11.09.13-PM.png\",\"contentUrl\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/Screenshot-2023-01-27-at-11.09.13-PM.png\",\"caption\":\"Pranay Patil\"},\"sameAs\":[\"https:\\\/\\\/shreshtait.com\\\/blog\"],\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/author\\\/pranay\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Phishing campaign Indiana Department of Workforce Development","description":"Security researchers at\u00a0Shreshta IT, have identified a phishing campaign targeting Indiana Department of Workforce Development","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\/","og_locale":"en_US","og_type":"article","og_title":"Phishing campaign targeting Indiana Department of Workforce Development\u2019s (DWD) Uplink","og_description":"Security researchers at\u00a0Shreshta IT, have identified a phishing campaign targeting Indiana Department of Workforce Development","og_url":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\/","og_site_name":"DNS Security &amp; Threat Intelligence Blog | Shreshta","article_published_time":"2023-02-08T07:54:38+00:00","article_modified_time":"2025-09-30T06:17:58+00:00","og_image":[{"width":1344,"height":896,"url":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/pswapneel_Create_an_abstract_generative_art_piece_that_captures_7a4213a7-fe00-4500-ae5c-83edc2d44ed8.png","type":"image\/png"}],"author":"Pranay Patil","twitter_card":"summary_large_image","twitter_creator":"@shreshtait","twitter_site":"@shreshtait","twitter_misc":{"Written by":"Pranay Patil","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\/#article","isPartOf":{"@id":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\/"},"author":{"name":"Pranay Patil","@id":"https:\/\/shreshtait.com\/blog\/#\/schema\/person\/675cf497a40c89e71d50bbac3e1288b6"},"headline":"Phishing campaign targeting Indiana Department of Workforce Development\u2019s (DWD) Uplink","datePublished":"2023-02-08T07:54:38+00:00","dateModified":"2025-09-30T06:17:58+00:00","mainEntityOfPage":{"@id":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\/"},"wordCount":725,"publisher":{"@id":"https:\/\/shreshtait.com\/blog\/#organization"},"image":{"@id":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\/#primaryimage"},"thumbnailUrl":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/pswapneel_Create_an_abstract_generative_art_piece_that_captures_7a4213a7-fe00-4500-ae5c-83edc2d44ed8.png","keywords":["campaign","dns","domain name","dwd","india","indiana","phishing","threat intelligence","united states"],"articleSection":["Threat Intelligence"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\/","url":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\/","name":"Phishing campaign Indiana Department of Workforce Development","isPartOf":{"@id":"https:\/\/shreshtait.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\/#primaryimage"},"image":{"@id":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\/#primaryimage"},"thumbnailUrl":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/pswapneel_Create_an_abstract_generative_art_piece_that_captures_7a4213a7-fe00-4500-ae5c-83edc2d44ed8.png","datePublished":"2023-02-08T07:54:38+00:00","dateModified":"2025-09-30T06:17:58+00:00","description":"Security researchers at\u00a0Shreshta IT, have identified a phishing campaign targeting Indiana Department of Workforce Development","breadcrumb":{"@id":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\/#primaryimage","url":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/pswapneel_Create_an_abstract_generative_art_piece_that_captures_7a4213a7-fe00-4500-ae5c-83edc2d44ed8.png","contentUrl":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/pswapneel_Create_an_abstract_generative_art_piece_that_captures_7a4213a7-fe00-4500-ae5c-83edc2d44ed8.png","width":1344,"height":896,"caption":"Phishing website targeting Indiana Department of Workforce Development"},{"@type":"BreadcrumbList","@id":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-campaign-targeting-indiana-department-of-workforce-developments-dwd-uplink\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/shreshtait.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Phishing campaign targeting Indiana Department of Workforce Development\u2019s (DWD) Uplink"}]},{"@type":"WebSite","@id":"https:\/\/shreshtait.com\/blog\/#website","url":"https:\/\/shreshtait.com\/blog\/","name":"DNS Security &amp; Threat Intelligence Blog | Shreshta","description":"DNS Security &amp; Threat Intelligence","publisher":{"@id":"https:\/\/shreshtait.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/shreshtait.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/shreshtait.com\/blog\/#organization","name":"Shreshta IT Technologies Pvt. Ltd.","alternateName":"Shreshta","url":"https:\/\/shreshtait.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/shreshtait.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/03\/Shreshta.svg","contentUrl":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/03\/Shreshta.svg","width":330,"height":76,"caption":"Shreshta IT Technologies Pvt. Ltd."},"image":{"@id":"https:\/\/shreshtait.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/shreshtait","https:\/\/infosec.exchange\/@shreshta","https:\/\/www.linkedin.com\/company\/shreshta\/"],"description":"DNS security and threat intelligence company providing real-time threat protection for organizations worldwide. Our solutions include DNS Shield (Protective DNS), DNS Watchtower (Passive DNS), and comprehensive threat intelligence feeds. Trusted by enterprises to detect, prevent, and investigate cyber threats at the DNS layer.","email":"sales@shreshtait.com","legalName":"Shreshta IT Technologies Pvt. Ltd.","foundingDate":"2014-01-22","numberOfEmployees":{"@type":"QuantitativeValue","minValue":"11","maxValue":"50"},"publishingPrinciples":"https:\/\/shreshtait.com\/blog\/blog\/"},{"@type":"Person","@id":"https:\/\/shreshtait.com\/blog\/#\/schema\/person\/675cf497a40c89e71d50bbac3e1288b6","name":"Pranay Patil","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/01\/Screenshot-2023-01-27-at-11.09.13-PM.png","url":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/01\/Screenshot-2023-01-27-at-11.09.13-PM.png","contentUrl":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/01\/Screenshot-2023-01-27-at-11.09.13-PM.png","caption":"Pranay Patil"},"sameAs":["https:\/\/shreshtait.com\/blog"],"url":"https:\/\/shreshtait.com\/blog\/author\/pranay\/"}]}},"_links":{"self":[{"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/posts\/3940","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/comments?post=3940"}],"version-history":[{"count":66,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/posts\/3940\/revisions"}],"predecessor-version":[{"id":7866,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/posts\/3940\/revisions\/7866"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/media\/4245"}],"wp:attachment":[{"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/media?parent=3940"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/categories?post=3940"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/tags?post=3940"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}