Italian phishing scam impersonates Ministry of Interior and Rome Tribunal

A phishing campaign is circulating in Italy that mimics official communications from the Ministry of the Interior and the Tribunal Ordinario di Roma. The fraudulent email claims the recipient has visited a "prohibited" website and cites a fictitious Law 231/2025, demanding action within 48 hours. Recipients are urged to open a PDF attachment hosted on Google Drive, which is presented as digitally signed.

The messages use the Italian Republic’s emblem, official‑sounding headings, and references to a non‑existent department for cybersecurity to appear legitimate. Authorities advise users to avoid clicking the link, run antivirus scans, change passwords, enable two‑factor authentication, and report the incident to the Polizia Postale.

The scam exploits fear of legal repercussions and the perceived authority of government institutions to trick victims into disclosing personal data or installing malware.