Beware: Don't open any email offering free COVID-19 test
Spoofed email ID which could be used for the phishing email is expected to be firstname.lastname@example.org.
The government has warned of a significant upcoming cyber-attack which offers free Covid-19 testing in India. Cyber crooks have planned a large-scale cyber-attack where they may use Covid-19 as bait to steal personal and financial details.
The Indian Computer Emergency Response Team (CERT-In) has issued an advisory warning that the phishing attacks could imitate government agencies and departments. It specified, "Phishing campaign is expected to impersonate government agencies, departments and trade associations who have been tasked to oversee the disbursement of the government financial aid."
"Spoofed email ID which could be used for the phishing email is expected to be email@example.com", it further added.
The CERT-In warning advisory mentioned that there would be a phishing email with a subject like free Covid-19 testing for all residents of Ahmedabad, Chennai, Delhi, Hyderabad, and Mumbai.
"The malicious group claims to have 2 million individual email addresses, and the attack campaign is expected to start on June 21," the Indian government-specified.
"Such emails are designed to drive recipients towards fake websites where they are deceived into downloading malicious files or entering personal and financial information," CERT-In said in the advisory dated June 19.
"It has been reported that these malicious actors are planning to spoof or create fake email Ids impersonating various authorities," it warned.
It asked users to encrypt and protect their valuable documents to avoid leakage. It also insisted people make use of anti-virus tools and filtering services. It also asked people to report any unusual activity or attack immediately to CERT-In.
The government also issued preventive measures asking not to open or click on an attachment in an unsolicited email, SMS or messages via social media. It also directed to be careful while opening attachments, even if the sender looks to be known.
"Beware of email addresses, spelling errors in emails, websites and unfamiliar email senders," stated the advisory, warning every Indian citizen not to submit personal financial details on unknown websites or links.
"Beware of emails, links providing special offers like Covid-19 testing, aid, winning prize, rewards, cashback offers," the government advisory stated.