Govt warns against large-scale phishing attacks using COVID-19 as bait

Amidst massive cyber attack in many countries including Australia for the past two days, Indian Cyber security agency has warned individual and business establishments about the possible large scale phishing campaign in the guise of free COVID-19 tests.

The government’s cyber security agency - Indian Computer Emergency Response Team (CERT-In) in its advisory said that in the guise of a free COVID-19 test, cyber warriors could carry out massive phishing campaign on June 21, 2020 with cyber attackers using email IDs such as "[e-mail]".

The attackers are likely to send malicious emails under the pretext of local authorities or government agencies that are in charge of dispensing government-funded COVID-19 support initiatives.

"Such emails are designed to drive recipients towards fake websites where they are deceived into downloading malicious files or entering personal and financial information," Indian Computer Emergency Response Team (CERT-In) said in its latest advisory dated June 19.

The advisory noted that the "malicious actors" are claiming to have 2 million individual/citizen email IDs and are planning to send email with the subject line: free COVID-19 testing for all residents of Delhi, Mumbai, Hyderabad, Chennai and Ahmedabad in a bid to coax users to disclose personal information.

"It has been reported that these malicious actors are planning to spoof or create fake email IDs impersonating various authorities," it cautioned.

The CERT-In requested public not to open unsolicited email, attachments even if it came from personnal contact and not give personal information.

For the past two days several countries including Australia, Japan and Vietnam witnessed cyber attacks.

Australia blamed China for cyber attack saying it was the handiworks of state actors.