Cyberattackers Prey on Health Fears in Sophisticated Phishing Campaign

Summary: A new report from JUMPSEC’s DART team reveals a disturbing trend of cybercriminals exploiting health fears through sophisticated phishing attacks. The report outlines how attackers used enticing health-related emails to deceive victims into providing sensitive information, employing multi-stage tactics to enforce these scams. Investigations into the infrastructure of the attackers revealed connections to poorly-reputed networks and the use of legitimate platforms to mask phishing activities.

Affected: Organizations targeted by phishing attacks

Keypoints :

• Phishing emails leveraged common health concerns to trick victims into clicking malicious links.
• The attack followed a multi-stage process that involved redirecting victims and collecting sensitive information.
• Use of legitimate services, like Cloudflare, to host phishing sites highlights the sophistication of these attackers.
• The investigation identified connections between multiple sender domains and a network with a history of malicious activities.
• Companies are urged to enhance user security training and email protection measures to combat such threats.