Small Businesses Targeted through Spoofed SBA COVID-19 Relief Website

Posted: Aug 13 2020

The Cybersecurity and Infrastructure Security Agency issued an alert yesterday regarding an unknown malicious cyber actor who is spoofing the SBA COVID-19 relief webpage through phishing emails. The phishing emails contain a malicious link to a fake page used for re-directs and credential stealing. The phishing email subject line currently reads, “SBA Application – Review and Proceed” and the sender is marked as “disastercustomerservice@sba[.]gov”.

For more information, including the IP address, indicators of compromise, and recommended mitigations for small businesses and organizations to take to strengthen their cybersecurity position; visit: https://us-cert.cisa.gov/ncas/alerts/aa20-225a