Bad actors are using the confusion about the new Omicron variant of COVID-19 to send phishing emails to snatch the personal data and bank information of unsuspecting victims. According to Which? Conversation, scammers are distributing fake emails masquerading as alerts from the National Health Service (NHS) in the UK and offer fake Omicron PCR tests to circumvent restrictions. Which? Conversation has alerted the National Cyber Security Centre (NCSC) to scam websites, emails, texts and phone calls.
These fake emails are deceptive and purport that the Omicron variant must be detected by using new test kits. In the email, scammers link a fake copy of the NHS website that requests the user’s identity information, which can be used for identity fraud. Furthermore, the website asks for a payment of £1.24 as well as the user’s mother’s maiden name, which is a common security question answer in emails and bank accounts.
To combat phishing attacks, people should be cautious of clicking links in suspicious emails. Also, people should notify the NCSC about fake websites and phishing emails. It is also recommended that people set up two-factor authentication and implement identity fraud protection.