Security News > 2021 > April > US DOJ: Phishing attacks use vaccine surveys to steal personal info
The US Department of Justice warns of phishing attacks using fake post-vaccine surveys to steal money from people or tricking them into handing over their personal information.
"Consumers receive the surveys via email and text message and are told that, as a gift for filling out the survey, they can choose from various free prizes, such as an iPad Pro," the DOJ said.
The DOJ Office of Public Affairs recommends avoiding clicking on links received via text messages or emails claiming to be a vaccine survey if they come from unknown and unverified sources.
Consumers who have received one of these fraudulent phishing emails or text messages using COVID-19 vaccine survey lures are urged to report such incidents to the National Center for Disaster Fraud via the NCDF Web Complaint Form or by calling 866-720-5721.
New York's Department of Financial Services also revealed additional details on an ongoing series of attacks that have already resulted in the theft of private info belonging to hundreds of thousands of New Yorkers.
To protect yourself from identity theft attempts, you can get an Identity Protection PIN ASAP to block identity thieves from filing fraudulent tax returns in your name using your stolen personal information.
News URL
Related news
- Ransomware gangs pose as IT support in Microsoft Teams phishing attacks (source)
- Microsoft Teams phishing attack alerts coming to everyone next month (source)
- How to Prevent Phishing Attacks with Multi-Factor Authentication (source)
- Hacker pleads guilty to SIM swap attack on US SEC X account (source)
- US indicts 8Base ransomware operators for Phobos encryption attacks (source)
- Critical PostgreSQL bug tied to zero-day attack on US Treasury (source)
- Microsoft: Hackers steal emails in device code phishing attacks (source)
- Darktrace: 96% of Phishing Attacks in 2024 Exploited Trusted Domains Including SharePoint & Zoom Docs (source)
- Phishing attack hides JavaScript using invisible Unicode trick (source)