Attackers copied the websites of state companies and organizations, where they were asked to register for a small fee.