Thread by @DCI_Kenya

Public Advisory: COVID-19 Phishing Scams. #StayAtHome #KomeshaCorona

Cybercrime actors are increasingly registering COVID-19 themed websites with the goal of conducting widespread phishing campaigns that distribute malicious software and harvest personal information...
/1

...from organizations and the unsuspecting public.

Through @KeCIRT, @CA_Kenya has observed a tremendous increase in COVID-19 themed phishing campaigns from both domestic and International IP addresses.
/2

These campaigns have been found to use malicious Microsoft Word Documents, Visual Basic Scripts, 7 - zip Compressed files, Javascript and Microsoft Executables to penetrate networks for purposes of exploitation, advanced persistent attacks and data exfiltration.
/3

These phishing campaigns have also been found to target remote systems that are being used by persons working from home.

Once successful, Cyber criminals are able to obtain user credentials that allow them to bypass security controls and gain access to accounts...
/4

... & networks belonging to the affected organizations.

@CA_Kenya urges all to remain vigilant & to report such cyber incidents to @KeCIRT via [e-mail] or through hotlines [phone] and [phone]

#StayAtHome #KomeshaCorona
/5