Wiltshire Police

Stay Safe Online

Email threats exploiting coronavirus fears

The COVID-19 pandemic is a huge opportunity for cyber criminals. And they're taking full advantage of it: spear-phishing attacks using the coronavirus as a hook have been growing since early 2020.

If in doubt, apply the 'scam' test:

They are holding two public meetings in October where you will be able to hear their proposals and importantly, tell them what matters most to you about your local police service.

The key questions are:

  • How can we build stronger relationships with our communities?
  • What do you think our priorities should be to ensure greater diversity in Wiltshire Police?
    • S - seems too good to be true
    • C - contacted out of the blue
    • A - asked for personal details
    • M - money is requested
    1. Malware
      A number of common malware types are being distributed through coronavirus-related phishing. Several types of Malware are prolific and often aim to steal login credentials and data and have been distributed in at least two different coronavirus-related phishing campaigns
    2. Scamming
      Fifty-four percent of COVID-19-related spear phishing attacks were scams. Most of them appear to be offering coronavirus cures and face masks for sale, requesting donations to fake charities, or asking for investments in fake companies that claim to be developing vaccines
    3. Brand Impersonation
      Attacks impersonating well-known brands and services make up around 34 percent of COVID-19 spearphishing attacks. Notably there are a number of attacks impersonating the World Health Organization. These phishing emails appear to come from WHO with information on COVID-19. They often use domain spoofing tactics to trick users into thinking these messages are legitimate.
    4. Blackmail
      Some attackers use raw emotional leverage to get readers to respond out of fear or embarrassment. With heightened anxiety and fear around COVID-19, it?s not surprising that some are using that emotion in blackmail or extortion attempts. For example, some attacks have threatened to infect victims and their families with coronavirus unless a ransom was paid.
    5. Business Email Compromise (BEC)
      BEC attacks usually impersonate a person of authority within an organization in order to access funds or valuable information. So far, COVID-19-related BEC attacks make up around one percent of spear-phishing attacks, but their number is growing fast-encouraged by the large number of employees working remotely. These attacks tend to ask urgently for fast payments related to COVID-19, or fraudulently advise of changes to payment methods in order to steal funds.

    Always use reliable anti-virus

    Never offer to part with any money to anyone you don't know


    onfirm they remain fit for purpose.

    To register your free place, please go to the Wiltshire Police website address below and select the event you would like to attend in Trowbridge or Swindon: https://www.wiltshire.police.uk/article/3376/We-need-your-views