"Omicron Phishing Campaign Hits User Inboxes"

According to researchers, online fraudsters have reacted quickly to news of a potentially new severe COVID-19 variant and have carefully crafted a phishing email campaign.  Consumer rights group Which? spotted the email, which is designed to appear as if sent from the NHS, and urges recipients to get a new PCR test for the Omicron variant.  Two separate versions of the same email feature a link and a legitimate-looking “get it now” button.  The email falsely claims that the new COVID variant requires new test kits, and the email invites readers to visit a site.  But clicking the link takes the victims to healt-service-nh.com, which is a copycat of the NHS website set up just days ago.  The phishing site then asks users to enter their full name, date of birth, address, mobile number, and email address, as well as their mother’s maiden name, which scammers could use to craft follow-on identity fraud attacks.  It also asks for a small payment of 1.24 pounds for ‘delivery.’  The researchers presume that if users proceed with this, then they will also have their bank card details stolen.  The researchers reported the scam to the National Cyber Security Centre’s Suspicious Email Reporting Service.

Infosecurity reports: "Omicron Phishing Campaign Hits User Inboxes"