Bulletin: Iranian Spoofed Emails Portraying the Proud Boys

Between Oct. 20 and 21, 2020, Iranian threat actors conducted an information operations campaign by sending emails, masquerading as the Proud Boys, to likely intimidate voters prior to the upcoming Nov. 3 election.

These attacks threatened voters in Alaska, Arizona and Florida.

Federal officials determined that Iran had obtained voter registration information.

At this time, there are no indications of fraudulent voting.

The actors used two email addresses seemingly associated with the Proud Boys: info@officialproudboys.com and info@proudboyusa.com .

Iranian threat actors used these approaches likely to sway voters through intimidating methods and claims.

The voter registration information, along with other identifiers like email addresses, can be used as a targeting mechanism to communicate false information.

DAF members receiving these spoofed emails should report the incident to their local Office of Special Investigations (OSI) detachment.

Members should also delete the email and avoid clicking any links or attachments, as they could possibly contain malicious software.