Home > About > News & Events > COVID-19 Safeguards
A new phishing email—seemingly sent from your local government funding agency—is offering phony relief grants to those in need. What makes this scam especially sneaky is that the bad guys use a Dropbox link to disguise their malicious attachment. Dropbox is a legitimate and commonly-used file sharing service. Therefore, the email security filters that your organization has in place may not consider the link as a red flag–increasing the chances of this email landing in your inbox.
The phishing email urges you to click a Dropbox link so you can download a file that supposedly contains information about your relief grant payment. The link even includes an expiration date for an added sense of urgency. If you click the link, then, download and open the phony file, you’re taken to a look-a-like Microsoft 365 login page. If you enter any information on this page it will be sent directly to the scammers.
Remember these tips:
Grocery delivery services have been quite popular during the COVID-19 pandemic. These services help support social distancing, reduce the number of shoppers in each store, and allow at-risk patrons to safely buy essential items. Unfortunately, the popularity of these delivery services has caught the attention of cybercriminals. The bad guys are now spoofing supermarkets that offer delivery services in hopes of stealing your personal information. It starts with a phishing email that urges you to log in to your supermarket’s website using the link provided. Clicking the link takes you to a fake login page for your local supermarket. The page asks you to select your email provider (Gmail, Apple, and so on) and then log in to connect your account. Don’t be fooled! Connecting your account actually delivers your email credentials to the bad guys.
Remember the following tips:
Microsoft has reported a massive phishing campaign that uses an Excel attachment as bait. The phishing email looks like it is from the Coronavirus Research Center of John Hopkins University–a well known medical organization in the US. The email includes an Excel attachment that is disguised as an updated list of Coronavirus-related deaths, but the file actually contains a hidden piece of malware.
If you open the infected Excel file and click “Enable Content” when prompted, a program called NetSupport Manager will be automatically installed on to your computer. This program is a tool that allows someone to access your computer remotely. Cybercriminals are using NetSupport Manager to gain complete control over a victim’s system; allowing them to steal sensitive data, install more malicious software, and even use the machine for criminal activities. Don’t be a victim!
Here are some ways to protect yourself from this scam:
Whether you’re working from home or trying to stay in touch with loved ones, video conferencing apps like Zoom are becoming the new normal. Cybercriminals have exploited this type of application before, but their latest scam may be the trickiest yet.
Scammers are sending out phishing emails with links to download the latest version of Zoom. When clicked, the link takes you to a third-party website–not the official Zoom site–to download an installer. If you download and run the file, the program truly does install Zoom. The trick is, the installer also places a remote access trojan (RAT) on to your computer. This RAT gives cybercriminals the ability to observe everything you do on your machine. This includes keylogging (saving what you type), recording video calls, and taking screenshots–all of which can be used to steal your sensitive information.
Don’t fall victim to this scam! Remember the following:
Countries around the world are developing COVID-19 tracking applications for mobile devices. These apps use digital tracking to help identify and notify users who have been in contact with someone diagnosed with the virus. Only a handful of countries have released this kind of app to the public, but cybercriminals are already using them as inspiration for scams.
The bad guys are sending phishing emails and smishing attacks (phishing via text messages) claiming that you have been in contact with someone diagnosed with Coronavirus. The message insists that you get tested and it includes a link that supposedly leads to a website where you can sign up for more information. The truth is, the link takes you to a malicious website that is designed to steal any information you enter and deliver it to the bad guys. Don’t be fooled!
Remember these tips:
Due to the Coronavirus crisis, unemployment numbers have skyrocketed. As usual, the bad guys are quick to take advantage of these hard times and are sending out phony work-from-home opportunities. Typically, these phishing emails contain grammar mistakes and offer minimal details about the hiring company and the job requirements. But the scammers still manage to grab your attention because the job opportunity includes a great paycheck.
Once accepted, these scammers ease the victim into their new “job”, by asking them to complete basic errands, but eventually they’re given the task of transferring funds from one account to another. Typically, these are stolen funds and the unsuspecting “employee” is being used as a money mule. Even though these victims are unaware of the crime they are committing, they can still face hefty fines and prison time.
Remember these tips and share them with your friends and family who may be looking for work:
Long before the COVID-19 pandemic, bad guys were spoofing Netflix emails in an attempt to collect your sensitive information. With more and more people looking for at-home entertainment, Netflix has gained over 15 million new subscribers. Cybercriminals are happily taking advantage of this larger audience!
Netflix themed phishing attacks can vary from phony email alerts accusing you of non-payment to offering you free streaming access during the pandemic. Both of these strategies include a link that takes you to a fake Netflix page designed to gather your information and deliver it to the bad guys.
Use the following tips to stay safe:
Governments across the globe have created restrictions to help reduce the spread of Coronavirus. These regulations change often and vary by country, region, and city. So knowing exactly what is expected of you can be a challenge. It’s no surprise that the bad guys are taking advantage of this confusion!
Cybercriminals are using text messaging, or short message service (SMS), to pose as a government agency. The message says you have been seen leaving your home multiple times and as a result you are being fined. They urge you to click on their official-looking link to pay this “fine” online. If you click the link, you’ll be taken to a payment page where you can give your credit card details directly to the bad guys!
This tactic is known as “Smishing” (SMS Phishing). Smishing can be even more convincing than email phishing because criminals know how to spoof their phone number to appear as though they’re calling from an official source. Be careful!
Here’s how to stay safe from this smishing attack:
Recently, some countries have chosen to lift restrictions that were originally put in place to control the spread of COVID-19. Beware! The bad guys are already taking advantage of this news. They have crafted a well-written phishing email that appears to come from the VP of Operations in your organization. The message claims that your organization has a plan for reopening, and it instructs you to click on a link to see this plan. Clicking the link opens what appears to be a login page for Office365, but don’t be fooled! If you enter your username and password on this page, you would actually send your sensitive credentials directly to the bad guys.
Here’s how to protect yourself from this clever attack:
During this storm of COVID-19 phishing scams, the bad guys love posing as your trusted Human Resources department. One recent HR scam started with an overdramatic subject line: “COVID-19 PANDEMIC IS WITHIN, BEWARE! WARNING!!!” In a mess of run-on sentences, the email claims that some of your co-workers have tested positive for Coronavirus. Keeping with the HR theme, they ask that you do not discriminate against these people and they suggest that “everyone should rather cease panic”.
The email does not identify anyone by name, but asks you to download an attached photo of the infected employees. This attack targets your natural curiosity. Who could it be? Wasn’t Bill coughing last week? I just have to know! If you were to download the attachment, you would find that it is actually a piece of malicious software designed to quietly steal data through your organization’s network. Don’t be fooled!
Remember these tips:
Fraudsters haven’t wasted any time with scams related to the coronavirus. In response to the federal stimulus package,the Better Business Bureau (BBB) reported that fraudsters have deployed a variety of scams involving coronavirus stimulus checks. The BBB Scam Tracker has received several reports of coronavirus scams where individuals are contacted through text messages, social media post /messages, or phone calls.
One version of the scam targets seniors through a Facebook post informing them that they can get a special grant to help pay medical bills. The link within the post takes them to a bogus website claiming to be a government agency called the “U.S. Emergency Grants Federation” where they are asked to provide their Social Security Number under the guise of needing to verify their identity. In other versions, fraudsters claim individuals can get additional money –up to $150,000 in some cases. The victims are asked to pay a “processing fee” to receive a grant.
In North Carolina, there are several reports of a coronavirus scam in which potential victims received phone calls. Fraudsters told the victims they qualified for a $1,000 to $14,000 coronavirus stimulus payment; however,they must first pay a processing fee.
Coronavirus direct payments will likely be in the form of direct deposits or through U.S. Treasury checks. Fraudsters may look to seize this opportunity to create counterfeit U.S. Treasury checks to use in their scams. Knowing when the stimulus checks will be issued, fraudsters could steal U.S. Treasury checks out of the mail and attempt to cash the. This was a common occurrence in the aftermath of Hurricane Sandy as fraudsters counterfeited and forged U.S. Treasury checks representing the Federal Disaster Assistance checks.
Fraudsters may also attempt to scam you into providing your account number under the pretense of direct depositing the stimulus payment to your account.
Protect yourself:
Cybercriminals are using concerns about the coronavirus to launch phishing attacks.
What Happened?
While COVID-19, or the novel coronavirus, is capturing attention around the world, cybercriminals are capitalizing on the public’s desire to learn more about the outbreak. There are reports of phishing scams that attempt to steal personal information or to infect your devices with malware, and ads that peddle false information or scam products.
In one example, a phishing email that used the logo of the CDC Health Alert Network claimed to provide a list of local active infections. Recipients were instructed to click on a link in the email to access the list. Next, recipients were asked to enter their email login credentials, which were then stolen.
What Should You Do:
1. If you are looking for information on the coronavirus, visit known reputable websites like U.S. Center for Disease Control or the World Health Organization.
2. Be on the lookout for phishing emails which may appear to come from a trusted source. Remember, you can look at the sender’s details – specifically the part of the email address after the ‘@’ symbol – in the ‘From’ line to see if it looks legitimate.
3. Be wary of emails or phone calls offering unexpected or unprompted information. Also be aware of emails from unfamiliar sources that contain links or attachments. Do not click on these links, as they could be embedded with malware.
4. Although social media companies like Facebook are cracking down on ads spreading coronavirus conspiracies and fake cures, some ads may make it past their review process. Remember, it’s best to seek information on the disease from official sources like those mentioned above.
Look out! The bad guys are preying on your fear and sending all sorts of scams related to the Coronavirus (COVID-19).
Below are some examples of the types of scams you should be on the lookout for:
Remain cautious! And always remember the following to protect yourself from scams like this:
MasterCard Login