As the number of COVID-19 cases, as well as publicity around the virus, rises globally, both cybercriminals and nation-state actors will increasingly exploit the crisis as a cyberattack vector.
Cybercriminals will often use the branding of “trusted” organizations in these phishing attacks, in order to build credibility and get users to open attachments or click on the link.
The number of references to COVID-19 in relation to cyberattacks has increased over the last two months, including country-specific phishing lures as the virus becomes more prevalent in that country.
The number of newly registered domains related to coronavirus has increased since the outbreak has become more widespread, with threat actors creating infrastructure to support malicious campaigns referring to COVID-19. Attackers may have begun to realize the utility of COVID-19 as a cyberattack vector.