A few weeks ago, Hornetsecurity warned of phishing and malware attacks in the name of health organizations, such as the WHO, which are exploiting fears about the coronavirus to steal sensitive data.
However, the danger is not yet averted – on the contrary: The threat situation is intensifying, and cybercriminals continue to develop new scams. The IT security experts at Hornetsecurity therefore have to issue another warning: Spam emails are increasingly appearing that link to dubious shops where respiratory masks can supposedly be ordered.
In addition, sextortion blackmailers are switching to Covid-19 scams and asking for Bitcoin donations in the name of the WHO.
Spam emails lure with dubious offers for respiratory masks
Respiratory masks are currently in gambling database brazil desperate need in many .
Places and are therefore only available at very high prices. Cybercriminals are exploiting this shortage and sending mass spam emails linking to fake online shops where respiratory masks are supposedly available.
The security experts at Hornetsecurity warn that these are mostly dubious fake shops that don’t deliver any products. Instead, users disclose sensitive personal and financial data to the scammers.
The police advise consumers who have already placed an order through such a shop to contact the payment provider immediately to stop the payment. They should also file a report.
Sextortion blackmailers switch to Covid-19 scams
A hacker group that usually uses sextortion scams to rob people is now setting up new sites: The senders of the emails are posing as members of the WHO and are asking the recipients for Bitcoin donations so that the spread david loh director, consulting services of the virus can be stopped.
Currently, scam emails appearing in the name of the World Health Organization are popping up frequently. The WHO has provided clear guidance on how to recognize fake emails on its website.
How to protect yourself
Good and reliable spam filters should prevent such emails from reaching end users’ inboxes. Since email communication in companies remains the main gateway for cyberattacks, in addition to establishing effective protection mechanisms, employees must also be sensitized to this issue. Detecting malicious emails is not easy—but not impossible either.
The following points should be checked:
- A detailed view of the sender’s email address can provide insight into the message’s true origin. If it’s implausible, contains transposed letters, or contains cryptic numbers, this is a warning sign.
- Large-scale phishing campaigns often only use a general salutation for the recipient.
- Incorrect spelling and grammar as well belgium numbers as an unprofessional layout are also an indication.
- The exertion of psychological pressure plays a significant role, intended to undermine critical thinking.
- Cybercriminals often try to trick recipients into opening a link. Email attachments can also pose risks.