CERT NZ is aware of a global increase in reports of cyber criminals using the COVID-19 (novel coronavirus) pandemic as an opportunity to carry out online scams and malicious cyber activity.
Reports include opportunistic attempts to use the COVID-19 pandemic to trick people to:
- download malware from COVID-19 maps, or
- enter their details into phishing websites.
What's happening
Systems affected
Scammers and attackers are using the public interest in COVID-19 to create opportunistic online scams and attacks.
Our international partners have shared reports of the following types of scams and attacks.
Text message scams
Reports have been received in Australia of COVID-19 themed scam text messages that have a link that claims to direct people to testing facilities. This link is not legitimate and instead may install malicious software on your device that’s designed to steal your personal information, such as banking details.
Phishing emails claiming to have updated COVID-19 information
Individuals in the UK have been targeted by coronavirus-themed phishing emails, with infected attachments containing fictitious 'safety measures’. Instead of the attachments containing health information, it instead installs malicious software on your device that’s designed to steal personal information.
We’ve also been made aware of similar emails being circulated internationally that encourage people to fill in their email and password before they can get information on COVID-19. These are not legitimate, and instead are an attempt to steal personal information.
Fake coronavirus maps
Security researchers have identified a new campaign where the attackers claim to have a ‘coronavirus map’ application that people can download onto their devices. Instead, the application is malware, designed to steal sensitive information from the device it is downloaded onto, such as passwords.
What to do
Prevention
CERT NZ recommends anyone looking for COVID-19 information looks to their regular news sites and official government websites.
Official information and all government updates on COVID-19 are collated on the govt.nz website.
NZ Government advice on COVID-19External Link
CERT NZ advises the following:
- Be sceptical of advice that doesn’t come from official sources, particularly if it's been sent to you unexpectedly.
- Protect your passwords and login credentials, don’t enter these into any websites relating to the COVID-19 virus.
- Keep your devices up-to-date.
- Keep your anti-virus up to date and run regular checks.
- Report suspected malware or phishing attempts to CERT NZ.
More information
- COVID-19 fraud schemes - InterpolExternal Link
- COVID-19 scam messages – Stay Smart OnlineExternal Link
- Coronavirus phishing attacks – NCSC UKExternal Link
- If you require more information or further support, submit a report on our website or contact us on 0800 CERTNZ.
- Report an incident to CERT NZExternal Link
For media enquiries, email our media desk at This email address is being protected from spambots. You need JavaScript enabled to view it. or call the MBIE media team on 027 442 2141.
