Phishing campaign spoofs local officials to steal permit fees