Phishing Campaign Targets ED Grant PortalThreat researchers at cybersecurity company BforeAI have identified a phishing campaign spoofing the U.S. Department of Education's G5 grant management portal. Multiple lookalike domains have been observed hosting phishing kits or cloned login portals in an attempt to harvest login credentials from legitimate users, the company explained. BforeAI noted that credentials stolen through this campaign could allow attackers to access sensitive grant award data, change payment instructions, or impersonate recipients for fraud, among other potential impacts. Users are advised to avoid clicking on links from unknown sources, always verify URLs, and report suspicious e-mails or domains to their organization's cybersecurity team or to [email protected]. For more information, visit the BforeAI site.