The United Kingdom’s consumer protection organization ‘Which?’ published two samples of new phishing emails pretending to be from the United Kingdom’s National Health Service (NHS) warning about the new Omicron variant. The emails offer the recipient a free PCR test that will allegedly allow them to avoid restrictions. To add trust in the emails, the malicious address used for distributing these emails is ‘email@example.com’. If the link in the email is clicked, the victim is taken to a fake NHS website where the recipient is instructed to enter their full name, date of birth, home address, mobile phone number, and email address. The victim is also required to pay £1.24 ($1.65), which is supposed to cover the delivery cost of the test results. Threat actors are using these payments to steal payment details from the victim.
By Akshay Rohatgi and Randy Pargman About this Student Research Project Binary Defense’s mission is