As the spread of coronavirus (COVID-19) continues to grow, the consuming amount of news coverage surrounding the virus has created a new danger – cybercriminals looking to exploit public fears using malware attacks. It is very important to be cautious for scams in times of uncertainty. We highly recommend the following tips on what you can do to make you, your colleagues & your families safer online.
Key points:
- COVID-19 is being used as a phishing lure by cybercriminals & nation states.
- We expect to see an increase in exploits related to COVID-19 as publicity around the virus increases.
- Cybercriminals are using trusted brands, like World Health Organization (WHO) & U.S. Center for Disease Control & Prevention (CDC), to build credibility & entice users into opening attachments.
What can you do?
- Don't click on any COVID-19 related links or attachments you receive via email or messaging apps. This includes messages to personal email providers like Gmail.
- Don't be fooled by legitimate-looking branding on messages you receive, there are good fakes doing the rounds. Cybercriminals will also often use language that conveys a sense of urgency, so be alert.
- If you want COVID-19 news, navigate directly to the WHO & CDC websites. Use best practices by typing URLs into your web browser & use Google Search to search for sites.
- Don't put your credentials into third-party sites unless you're 100% sure you're on the correct site.