CISA Warns of Phishing Campaign with Loan-Relief LureCISA Warns of Phishing Campaign with Loan-Relief Lure
Phishing emails and fake website promise help with the Small Business Administration's program that aids those affected by COVID-19.
August 14, 2020
The Department of Homeland Security's Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about an in-progress phishing campaign using the Small Business Administration (SBA) COVID-19 loan-relief program as bait. According to the warning, the still-unknown malicious actor has spoofed the SBA's loan-relief page and is using the fake site to steal credentials and carry out other malicious actions.
The warning says that CISA analysts have seen phishing emails addressed to various federal civilian executive branch recipients as well as those in state, local, tribal, and territorial government. The indicators of compromise include a number of specific IP addresses to which URLs resolve, URLs that include the string "leanproconsulting," and display URLs that feature legitimate agency prefixes with unusual top-level domains.
Among the mitigations CISA suggests are keeping anti-malware and systems software up to date, and reminding employees to be careful about clicking on links in email messages.
For more, read here.
About the Author(s)
You May Also Like
Hacking Your Digital Identity: How Cybercriminals Can and Will Get Around Your Authentication MethodsOct 26, 2023
Modern Supply Chain Security: Integrated, Interconnected, and Context-DrivenNov 06, 2023
How to Combat the Latest Cloud Security ThreatsNov 06, 2023
Reducing Cyber Risk in Enterprise Email Systems: It's Not Just Spam and PhishingNov 01, 2023
SecOps & DevSecOps in the CloudNov 06, 2023
Passwords Are Passe: Next Gen Authentication Addresses Today's Threats
What Ransomware Groups Look for in Enterprise Victims
Concerns Mount Over Ransomware, Zero-Day Bugs, and AI-Enabled Malware
Everything You Need to Know About DNS Attacks
Securing the Remote Worker: How to Mitigate Off-Site Cyberattacks