Cybercriminals are taking advantage of the novel Coronavirus (COVID-19) epidemic by sending out fake awareness emails like the one below. The fake emails ask recipients to click on a link that goes a fake or cloned WHO (World Health Organization) website. On the fake website, visitors will be asked to enter their email account credentials. But, if they do, their email account credentials will be sent to the cybercriminals behind the fake emails.
A Fake "WHO Coronavirus Awareness" Email
WHO Corona virus Awareness
Wed 2/5/2020 8:52 AM
From: medicasupport@who.com
Dear Sir,
Go through the attached document on safety measures regarding the spreading of corona virus.
Click on the button below to download
Safety measures
Symptoms common symptoms include fever,coughcshortness of breath and breathing difficulties.
Regards,
Dr. ##UNAME##
Specialist wuhan-virus-advisory
Althought the fake email appears as if it came from WHO, it was actually spoofed and sent from another email address being used by the cybercriminals. And, the link in the fake email goes to the following fake WHO website created by the cybercriminals:
Once the cybercriminals have received the stolen credentials, they will use it to gain access to their potential victims' accounts, hijack and use them fraudulently. Therefore, online users who have been tricked by the fake WHO email are asked to change their account passwords before their accounts are hijacked.
It is recommended that online users go directly to The World Health Organization's website at https://www.who.int/ for information about the Novel Coronavirus(2019-nCoV), instead of clicking on a link in an email, which may be a link to a phishing website that steals personal information and account credentials.