New research has identified more than 300 phishing email campaigns over the past two months, some of which impersonated and spoofed websites from federal agencies, international governments, and public health organizations involved in COVID-19 relief. They mimicked web sites of agencies such as the CDC, FEMA, IRS, WHO, the Federal Reserve, the White House, and the governments of other countries, in attempts to steal banking credentials. A common theme for almost all the campaigns was an effort to leverage interest in the COVID-19 pandemic, but they otherwise adopted a general “spray and pray” strategy for victims, with little apparent focus on specific individuals or industries.
Cybersecurity, Privacy, & AI
Trending Now
Weaponized Email AI Assistants Could Help Attackers Hijack Accounts • CISA Guidance Targets Water Sector Security, Open Source AI and More • Salesforce Previews Plans to Deliver Newly Authorized ‘AI Agents’ Across DOD • CMS Pivots to Risk-Based Cybersecurity Model, CISO Says • Senate Set to Debate Package of Bills on Privacy, AI and Kids Safety
CDC, IRS and Other Federal Sites Spoofed in Global Phishing Scams
wk1003mike | Shutterstock
Stay compliant and protected with daily updates on cybersecurity, data privacy, and federal oversight with our Cyber & Privacy newsletter, delivering up-to-the-minute intelligence Monday–Saturday — Subscribe here.