State warns of phishing campaign targeting Hawaii government websites

HONOLULU (HawaiiNewsNow) - State officials are warning the public a phishing campaign that uses a fake domain to impersonate official government websites.

Cybercriminals are using the false codify.inc domain to create fake web addresses. They trick users into providing sensitive personal information or login credentials, officials said on Tuesday.

The false sites target multiple state agencies, including the departments of Labor and Industrial Relations, Agriculture, Education, Defense, Health, Business Economic Development and Tourism, Commerce and Consumer Affairs, Public Safety, Taxation, Human Services, Budget and Finance, and Transportation.

The fraudulent websites use subdomains that appear to mimic legitimate state agency sites. Examples include dlir.hi.usa.codify.inc, which impersonates the Department of Labor and Industrial Relations, and similar addresses for other departments.

These sites may appear legitimate and often use “AI-native services” as a lure to encourage users to enter their data, according to officials.

Residents are advised to check website URLs carefully. Official State of Hawaii websites will always end in .gov.

If the address ends in .inc, .co, or any other extension, it is not an official government portal.

Residents should not click on links provided in unsolicited emails or text messages. Instead, they should type official addresses directly into their browser.

Anyone who encounters a site they believe is fraudulent should report it to soc@hawaii.gov .