Online face mask sales scams, 400% uptick of coronavirus phishing reports: Brit cops' workload shifts online along with the nation's
(2020/03/20)
- Reference: 1584730930
- News link: https://www.theregister.co.uk/2020/03/20/coronavirus_scam_reports_police_up_400pc/
- Source link:
British police are saying coronavirus-related fraud reports have spiked by 400 per cent over the past six weeks as the COVID-19 illness continues its inexorable march through humanity.
Although absolute numbers of reports are low, perhaps kept that way because the public now knows Action Fraud is [1]largely useless , the National Fraud Intelligence Bureau (NFIB) said there were a total of 200 reports of coronavirus scams made to them since 1 February.
"The majority of reports are related to online shopping scams where people have ordered protective face masks, hand sanitiser, and other products, which have never arrived," said the NFIB in a statement.
The police unit's chief, Superintendent Sanjay Andersen, added: "The majority of scams we are seeing relate to the online sale of protective items, and items that are in short supply across the country, due to the COVID-19 outbreak. We're advising people not to panic and to think about the purchase they are making. When you're online shopping it's important to do your research and look at reviews of the site you are buying from."
This links into both private sector and public sector figures showing that coronavirus-related phishing messages are spreading like – well, like a global pandemic.
Infosec biz Check Point said earlier this week it had seen an uptick in cybercrime forum activity, including criminals offering discounts to fellow crims for using coronavirus-themed bait in online scams and phishing attacks. Yaniv Balmas, the firm's head of cyber research, gloomily observed: "Furthermore, we are seeing hackers use the attention on COVID-19 to spread their harmful 'goods' in as many places as possible through COVID-19 specials and discounts on the dark net."
Earlier this week the GCHQ-owned National Cyber Security Centre warned of "bogus emails with links claiming to have important updates, which once clicked on lead to devices being infected." Those scam emails included ones appearing to come from the US Centre for Disease Control and the World Health Organisation, offering paid-for access to a live map of nearby COVID-19 infection cases.
Clicking the link in the email takes you to a credential-stealing webpage so cybercrooks can empty unwitting marks' bank accounts.
Another common one doing the rounds, according to the police NFIB, is a variation on the old HM Revenue and Customs tax refund scam. These versions display the HMRC logo and feature bait text that looks reasonably convincing.
🚨 I’ve received this email personally into my email inbox...ITS A HMRC SCAM 🚨 ‘Dear Taxpayer’ is the first sign, it’s from ma_aberdeen@hotmail.com and finally HMRC don’t correspond via email. I did not click on the link instead I’ve reported it to [2]@actionfrauduk 🌟 [3]@TakeFive [4]pic.twitter.com/N8w6LCExyM — Georgina Kate Woodcock (@GeorginaWoodco) [5]March 9, 2020
With political wonks filling Twitter with shrill demands for the government to hand out money directly to citizens instead of providing loans and grants to businesses, this particular scam may sucker in even switched-on netizens.
Paul Chichester, NCSC's director of operations, said in a canned statement: "We know that cyber criminals are opportunistic and will look to exploit people's fears, and this has undoubtedly been the case with the Coronavirus outbreak."
Emails seen by NCSC were being used to spread the Emotet banking trojan, a particular hazard in an era where virtually everyone below a certain age has become dependent on online banking as a result of lockdowns and growing rumours of mandatory home curfews in the UK.
Stay safe – and that means online as well as offline. ®
Breaking news
Prime Minister Boris Johnson has [6]ordered bars, restaurants, clubs, gyms, and similar businesses to close immediately, and for people to socially distance themselves and work from home if possible, to prevent the spread of coronavirus in Blighty. The UK government has also offered to cover 80 per cent of wages for employees unable to work, up to £2,500 a month.
[1] https://www.theregister.co.uk/2019/10/21/action_fraud_computer_misuse_crimes_decrease/
[2] https://twitter.com/actionfrauduk?ref_src=twsrc%5Etfw
[3] https://twitter.com/TakeFive?ref_src=twsrc%5Etfw
[4] https://t.co/N8w6LCExyM
[5] https://twitter.com/GeorginaWoodco/status/1237042274133053441?ref_src=twsrc%5Etfw
[6] https://www.bbc.com/news/live/world-51969508
Although absolute numbers of reports are low, perhaps kept that way because the public now knows Action Fraud is [1]largely useless , the National Fraud Intelligence Bureau (NFIB) said there were a total of 200 reports of coronavirus scams made to them since 1 February.
"The majority of reports are related to online shopping scams where people have ordered protective face masks, hand sanitiser, and other products, which have never arrived," said the NFIB in a statement.
The police unit's chief, Superintendent Sanjay Andersen, added: "The majority of scams we are seeing relate to the online sale of protective items, and items that are in short supply across the country, due to the COVID-19 outbreak. We're advising people not to panic and to think about the purchase they are making. When you're online shopping it's important to do your research and look at reviews of the site you are buying from."
This links into both private sector and public sector figures showing that coronavirus-related phishing messages are spreading like – well, like a global pandemic.
Infosec biz Check Point said earlier this week it had seen an uptick in cybercrime forum activity, including criminals offering discounts to fellow crims for using coronavirus-themed bait in online scams and phishing attacks. Yaniv Balmas, the firm's head of cyber research, gloomily observed: "Furthermore, we are seeing hackers use the attention on COVID-19 to spread their harmful 'goods' in as many places as possible through COVID-19 specials and discounts on the dark net."
Earlier this week the GCHQ-owned National Cyber Security Centre warned of "bogus emails with links claiming to have important updates, which once clicked on lead to devices being infected." Those scam emails included ones appearing to come from the US Centre for Disease Control and the World Health Organisation, offering paid-for access to a live map of nearby COVID-19 infection cases.
Clicking the link in the email takes you to a credential-stealing webpage so cybercrooks can empty unwitting marks' bank accounts.
Another common one doing the rounds, according to the police NFIB, is a variation on the old HM Revenue and Customs tax refund scam. These versions display the HMRC logo and feature bait text that looks reasonably convincing.
🚨 I’ve received this email personally into my email inbox...ITS A HMRC SCAM 🚨 ‘Dear Taxpayer’ is the first sign, it’s from ma_aberdeen@hotmail.com and finally HMRC don’t correspond via email. I did not click on the link instead I’ve reported it to [2]@actionfrauduk 🌟 [3]@TakeFive [4]pic.twitter.com/N8w6LCExyM — Georgina Kate Woodcock (@GeorginaWoodco) [5]March 9, 2020
With political wonks filling Twitter with shrill demands for the government to hand out money directly to citizens instead of providing loans and grants to businesses, this particular scam may sucker in even switched-on netizens.
Paul Chichester, NCSC's director of operations, said in a canned statement: "We know that cyber criminals are opportunistic and will look to exploit people's fears, and this has undoubtedly been the case with the Coronavirus outbreak."
Emails seen by NCSC were being used to spread the Emotet banking trojan, a particular hazard in an era where virtually everyone below a certain age has become dependent on online banking as a result of lockdowns and growing rumours of mandatory home curfews in the UK.
Stay safe – and that means online as well as offline. ®
Breaking news
Prime Minister Boris Johnson has [6]ordered bars, restaurants, clubs, gyms, and similar businesses to close immediately, and for people to socially distance themselves and work from home if possible, to prevent the spread of coronavirus in Blighty. The UK government has also offered to cover 80 per cent of wages for employees unable to work, up to £2,500 a month.
[1] https://www.theregister.co.uk/2019/10/21/action_fraud_computer_misuse_crimes_decrease/
[2] https://twitter.com/actionfrauduk?ref_src=twsrc%5Etfw
[3] https://twitter.com/TakeFive?ref_src=twsrc%5Etfw
[4] https://t.co/N8w6LCExyM
[5] https://twitter.com/GeorginaWoodco/status/1237042274133053441?ref_src=twsrc%5Etfw
[6] https://www.bbc.com/news/live/world-51969508
tfewster
Would you really expect the Education Secretary to know all the details of a fast moving situation far bigger than their department? Especially when they'll be swamped with education issues and Central Policy is flip-flopping on the fly?*
* That's not really a criticism - Even Churchill would have been hard-pressed to manage this war
Joined-Up Government
Speaking on BBC Radio 4's Today programme, Education Secretary Gavin Williamson said there are currently no plans to shut down bars and restaurants and order people off the streets, but that ministers would be guided by the scientific evidence.
"We will take the incredibly tough decisions that are sometimes needed in order to ensure the safety of the population,” he said.
20th March
https://www.edinburghnews.scotsman.com/news/transport/will-uk-go-lockdown-when-britain-could-face-tougher-restrictions-over-coronavirus-crisis-and-what-it-means-2445902
.
The Prime Minister Boris Johnson has announced cafes, pubs, bars and restaurants have been told to close tonight in the fight against the coronavirus pandemic.
20th March
https://www.standard.co.uk/news/uk/coronavirus-uk-latest-live-updates-cases-a4392591.html