Please be careful when visiting the MOTUS website, as many fake sites that look just like MOTUS have been created in the last ~30 days. While the FMCSA’s fraud alert lists 4 URLs, there are actually many, many more.
This is far worse than credential-harvesting fake login sites. Some of the sites include a multi-step wizard that walks you, the victim, through the full identity theft process, including live payment capture. Then, all the information gathered (Social Security number, date of birth, and financial info) is sent to a Telegram channel…
From the FMCSA
Latest reports indicate that bad actors have started to impersonate the Motus (not an acronym and not all caps) website application, whose legitimate URL is https://motus.dot.gov/
The bogus “New MOTUS Portal” (all in caps) has the following URLs:
dot. motusdatasboard. com
dot. motusdatadesk. com
dot. motuswebdeck. com
dot. motusfunction. com
Customers have been receiving emails with the subject line “Notice of Required Off-Cycle Update- Motus email” urging them to click on the “New MOTUS Portal” link to update their profile.
FMCSA’s Guidance on What You Can Do
Do not click any suspicious links; hover over them to see the real email address or URL of that link. Click ONLY on links you deem trustworthy.
Visit the U.S. Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) for more guidance on online deception tactics.
You can report scams and suspicious communications to the U.S. Federal Trade Commission.
You can also contact the FBI’s Internet Complaint Center, your local police and/or state attorney general’s office for assistance.
Reach out to the FMCSA Contact Center or call (1-800-832-5660) if you are the target of these practices.
Please be safe out there, on the road, and on the internet.