Phishing Scam – Be Alert

Computer Emergency Response Team- India (Cert-In) warns general public about targeted cyber attacks by Hacker groups using malicious emails in the name of COVID19.

Hackers are claiming to have 2 million email IDs and are planning to send  phishing mails with subjects like “Free COVID-19 testing” to individuals luring them to disclose personal information. Such emails are designed to drive recipients towards fake websites where they are deceived into downloading malicious files or entering personal and financial information.

The Phishing email will look like

“ Dear Citizens,

The Ministry of health and family welfare, Government of India has announced a mandatory COVID-19 testing for all residents of Delhi, Mumbai, Hyderbad, Chennai and Ahemedabad above age of 40 years. Government of India has decided to re-imburse testing cost incurred. A medical staff will come to your residence to collect samples.

Please immediately register using link below for al free COVID-19 test. Do not forget to provide complete contact details with PAN no.

Thank you for your support in keeping India’s fight against COVID-19

Thank you.

Ministry of Health and Family Welfare(MOHFW).

Nirman Bhawan, Moulana Azad Road,

New Delhi 110001. “

If you encounter any such Phishing mail  or attack , please report immediately to incident@certin.org.in.

Please be cautious about such Phishing mails and do not fall victim to such Phishing mails.

Best Practices in opening the mails received:

• Don’t open attachments in unsolicited e-mails, even if they come from people in your contact list, and never click on a URL contained in an unsolicited e-mail, even if the link seems benign.
• In cases of genuine URLs close out the e-mail and go to the organization’s website directly through browser.
• Exercise caution when opening e-mail attachments even if the attachment is expected and the sender appears to be known.
• Keep up-to-date patches and fixes on the operating system and application software such as client side softwares, including Adobe Products (Reader, Flash player), Microsoft Office suite, browsers & JAVA applications.
• Enhance the Microsoft Office security by disabling ActiveX controls, Macros, Enabling Protect View, File Protection Settings.

Note: Please do not share or disclose any of your credentials with respect to ATM, Internet and Mobile banking details to anyone by Phone or E-mail. It could be a fraudulent Phone Call or E-mail. Bank never asks such kind of information from customers.

Stay Safe!

R♥Vi