Office 365 Users Targeted By ‘Coronavirus Employee Training’ Phish

Researchers are warning of a new phishing attack that purports to send coronavirus training resources to employees who are returning to the workplace, as COVID-19 lockdowns lift. The recent phishing campaign leverages novel training programs that are required for employees in the workplace to comply with coronavirus regulations. The campaign, targeting Office 365 users, sends an email that includes a link to register to the training: “COVID-19 Training for Employees: A Certificate for Health Workplaces.” Instead of a legitimate sign-up page, however, it instead directs users to a malicious link, where they are asked to input their credentials (at the moment that link is inactive), according to a new report from Check Point Research.


EXPERTS COMMENTS
Javvad Malik, Security Awareness Advocate,  KnowBe4
June 29, 2020
It is vital that organisations continually keep employees abreast of what the ongoing situation is, and how to expect communication.
Ever since COVID-19 broke, we've seen a sharp increase in the number of COVID-19 themed phishing attacks. This new attack, unfortunately, indicates that this trend shows no signs of slowing down. It is vital that organisations continually keep employees abreast of what the ongoing situation is, and how to expect communication. They should be made aware of these kinds of threats that exist, how t ....
[Read More >>]

If you are an expert on this topic:

Submit Your Expert Comments


In this article