Phishing emails that include a link to receive a message allegedly from “Chai Urgent Care” have been reported by several Lakewood residents.
Chai Care has locations in several states in the metropolitan area. There are local offices in Jackson, Freehold in addition to Lakewood. Note that these emails do not come from any Chai Urgent Care location. The hackers are targeting end users and not Chai Urgent Care Systems.
The link leads to a website requesting the user to download a “message[.]html” document attachment. Once the user clicks on the attachment, a separate website loads that impersonates a Microsoft login screen and prompts the user to enter their account credentials to view the document. Clicking any other links on the page just redirects back to refresh the website.
When the website loads, various actions are performed such as attempting what is known as a process injection as well as sending compromised personal information to malicious websites, including information about the users’ device. The threat actors behind the campaign steal any submitted credentials for use in subsequent malicious activity.
If you receive such an email, do not click anywhere and delete it immediately.
UPDATE: Chai Care released the following statement to TLS:
Chai Care is aware of the latest phishing scam that used our name.
We at Chai Care take your security, safety, and confidentiality very seriously. We are writing to ensure all our patients, family, and friends that our website and email, and all interactions are 100% safe and secure.
We use only protected networks, and there has been no breach of data on our end.
All your personal data and information are safe.
A secure Chai Care email will ONLY come through a legitimate chaicare.org email address.
Never respond or click on any links that do not come directly from us.
We are working with our security department and team diligently on this matter.
Please know our Urgent Care Centers are open and running to serve you all safely and securely.
Please do not hesitate to reach out to me.
My personal cell is 848-326-5426