The Internet Security Office (OSI) of the National Cybersecurity Institute (Incibe) has warned of a new campaign of massive sending of fraudulent messages supplanting the Ministry of Health for ‘an extra dose of the vaccine against COVID-19’.
The fraudulent email is sent from an address that does not belong to the official domain corresponding to the Ministry of Health and with the subject ‘We have an urgent announcement about the extra dose of vaccine!’, although it is not ruled out that other emails may be being sent with other similar or even different matters.
The content of the message informs the user that they have been selected to receive an additional dose of the COVID-19 vaccine in the coming days. In addition, you will supposedly be able to choose the manufacturer of it. Finally, you are invited to click on different links to see additional instructions or how to request the brand of the dose.
–
The message is characterized by:
- It is identified by the logo of the Ministry of Health
- It contains no spelling or wording errors, thus making it even more believable.
- They use the email address to address the victim, instead of the first and last name.
By clicking on any of the links, the user is redirected to a fraudulent web page and automatically downloads a .zip file containing malware.
Solution
If you have received an email with these characteristics and you have followed the instructions contained therein, a malicious file will have been downloaded and executed on the device, therefore, you must proceed to disinfect it following the guidelines specified in this content “Device disinfection” .
If you have doubts during the disinfection process or you don’t know how to do it, you can contact the INCIBE-CERT incident management team, a technician will help you solve your doubts.
–
–
–
–
–
