CERT-In issued advisory on Phishing Attack Campaign by Malicious Actors
COVID 19-related Phishing Attack Campaign by Malicious Actors
It has been reported that malicious actors are planning a large-scale phishing attack campaign against Indian individuals and businesses (small, medium, and large enterprises). The phishing campaign is expected to use malicious emails under the pretext of local authorities in charge of dispensing government-funded Covid-19 support initiatives. Such emails are designed to drive recipients towards fake websites where they are deceived into downloading malicious files or
entering personal and financial information.
The phishing campaign is expected to be designed to impersonate government agencies, departments, and trade associations who have been tasked to oversee the disbursement of the government fiscal aid.
The malicious actors are claiming to have 2 million individual / citizen email IDs and are planning to send emails with the subject: free COVID-19 testing for all residents of Delhi, Mumbai, Hyderabad, Chennai and Ahmedabad, inciting them to provide personal information.
It has been reported that these malicious actors are planning to spoof or create fake email IDs impersonating various authorities. The email id expected to be used for the phishing campaign towards Indian individuals and businesses is expected to be from email such as “ncov2019@gov.in” and the attack campaign is expected to start on 21st June 2020.The email may look as follows:
Best Practices
1. Don’t open attachments in unsolicited e-mails, even if they come from people in your contact list,
and never click on a URL contained in an unsolicited e-mail, even if the link seems benign. In cases of genuine URLs close out the e-mail and go to the organization’s website directly through browser.
2. Leverage Pretty Good Privacy in mail communications. Additionally, advise the users to encrypt
/ protect the sensitive documents stored in the internet facing machines to avoid potential leakage Exercise caution when opening e-mail attachments even if the attachment is expected and the
sender appears to be known.
3. Scan for and remove suspicious e-mail attachments; ensure the scanned attachment is its “true
file type” (i.e. the extension matches the file header). Block the attachments of file types,“exe|pif|tmp|url|vb|vbe|scr|reg|cer|pst|cmd|com|bat|dll|dat|hlp|hta|js|wsf”
4. Beware about phishing domain, spelling errors in emails, websites and unfamiliar email senders
Check the integrity of URLs before providing login credentials or clicking a link.
5. Do not submit personal information to unknown and unfamiliar websites.
6. Beware of clicking form phishing URLs providing special offers like winning prize, rewards,
cashback offers.
7. Consider using Safe Browsing tools, filtering tools (antivirus and content-based filtering) in your
antivirus, firewall, and filtering services.
8. Update spam filters with latest spam mail contents
9. Any unusual activity or attack should be reported immediately at incident@cert-in.org.in. with the relevant logs, email headers for the analysis of the attacks and taking further appropriate actions.
CERT-In Advisory Notes https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES0…
2 of 3 20-06-2020, 22:23
References
https://zeenews.india.com/india/north-koreas-lazarus-hackers-plan-phishingattack-in-india-to-steal-covid-aid-2290701.html
https://www.cyfirma.com/early-warning/global-covid-19-related-phishingcampaign-by-north-korean-operatives-lazarus-group-exposed-by-cyfirmaresearchers/
Disclaimer
The information provided herein is on “as is” basis, without warranty of any kind.
Contact Information
Email: info@cert-in.org.in
Phone: +91-11-24368572
Postal address
Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi – 110 003
India
Source : https://www.incometaxindiaefiling.gov.in/eFiling/Portal/StaticPDF_News/CERT_IN_Advisory.pdf
K.C.MAHATO is expert in GST Consultancy and has an experience of more than 10 years in Indirect tax , Direct Taxes and the accounting profession. He is also giving GST Practical Training to Students and SME Traders. He provide services that most effectively meet client needs. Her experience is concentrated in performing GST Laws & Practices and compliances of gst in a variety of industries.
