DHS Warns Partners of Phishing Attempt

Today, the Wisconsin Department of Health Services (DHS) is alerting partners they may have been sent an email impersonating a DHS staff member as part of a phishing campaign, attempting to capture credentials and personal information.

Email content varies, but each impersonates DHS staff members and includes a link to review or submit a bid proposal. See an example below. The link takes users to a fake Microsoft login page and asks them to enter credentials.

DHS will never ask anyone to click a link to enter personal information.

Partners who received this email message should delete it immediately. Anyone who clicked a link in the email should notify their Information Technology (IT) team immediately. Some mailboxes impacted by this attack had email rules set up to hide activity in the impacted mailbox.

This is a reminder for DHS partners and all Wisconsinites to keep email security top of mind:

• Always be cautious with links and attachments in emails, especially from any unrecognized senders.
• Watch for requests that aren't reasonable and call for urgent action.
• Hover to discover: hover over any links and look closely at the URL that's displayed.
  • Phishing messages often use slight misspellings, possibly including just one extra character or swapping the order of letters in a domain name.
• Phishing messages can look like they come from trusted sources or familiar senders. If the request feels "off," verify through alternate means; do not reply to the email sender.
  • Responding to a suspicious email might inadvertently share login credentials or personal information.
• Promptly report all suspicious messages to the appropriate security or IT team.
• Report a scam or file a complaint with the Wisconsin Department of Agriculture, Trade and Consumer Protection (DATCP) by visiting the Consumer Protection webpage or contacting the Consumer Protection Hotline at (800) 422-7128 or DATCPHotline@wisconsin.gov.

Example email: