时间:2025-02-28 23:43:32 来源:网络整理编辑:熱點
You didn’t think the U.S. government would send up tp $1,200 to millions of Americans without
You didn’t think the U.S. government would send up tp $1,200 to millions of Americans without catching the eye of at least a few scammers and unscrupulous online marketers, did you?
Hundreds of domain names related to the $2 trillion stimulus package have been registered in the past month, according to a new reportby security firm Tessian.
The domain names in question are being used for a variety of purposes. Some are spam and data mining traps. Others appear to lead to educational websites, while still others offer consultancy services or assistance in obtaining your stimulus check or business loan. Of course, this doesn’t necessarily mean they are offering a true no-strings-attached resource.
“Cybercriminals will always follow the money."
“Cybercriminals will always follow the money, and look for ways to take advantage of the fact people will be seeking more information or guidance on this scheme,” said Tessian CEO Tim Sadler in a statement to Mashable.
Shady internet marketers often utilize trending topics for their money-making opportunities. For weeks, Google Trends data has shown that stimulus-related questions and search queries have dominated Google search.
By using these domains, scammers are able to portray their site as an authority on the topic as well as game search engines for better placement on search results pages.
One site checked by Mashable, which included the keywords “stimulus” and “COVID-19” in the URL, attempted to install a browser app upon loading. The single-page website offered nothing more than a few paragraphs of stolen copy and an email list signup form.
Unlike similar scams, such as various tax-related online fraudsthat come around every year, the coronavirus stimulus sites don’t attempt to mimic official government websites.
In total, the report uncovered 673 non-governmental, stimulus-related domains that were registered between March 17 and April 13. Exactly how many are nefarious is unclear. Some may be trying to provide actual, helpful services. But others are looking to profit off of the extra cash the government has slid into millions of pockets.
SEE ALSO:The IRS is launching a website to check the status of your stimulus paymentTessian found that a quarter of all these stimulus-related domains were offering education resources from consultants, lawyers, and other experts. It's unclear how many of these websites are offering legitimate services.
Perhaps most notable were the 10 percent of these newly registered, non-governmental domains providing a “calculator tool” for people to check their stimulus check eligibility. Some of these tools require users to enter personal information such as their salary or address.
Sadler specifically warned users to be cautious around these type of sites.
“Cybercriminals could use the information you shared to craft targeted phishing emails that include the ‘results’ of your assessment, tricking you to click on malicious links with the intention of stealing money, credentials or installing malware onto your device,” he explained.
In addition, the IRS has already set up its own official stimulus check status checker.
Other domains in the report were offering loans to businesses during the pandemic. Some were providing outlets for those looking to donate their stimulus check to COVID-19 causes.
Over the past month, malicious actors have been hard at work, trying to take full advantage of the coronavirus crisis. Scammers have been hawkingfake testing kits and non-existent vaccines on fly-by-night ecommerce stores.
“Always check the URL of the domain and verify the legitimacy of the service."
Late last month, an Instagram meme account with 14 million followers was bannedfrom the service after spreading a coronavirus-related money-making scheme.
Even services tangentially related to the coronavirus pandemic have been the focus of criminals. For example, Zoom, the video conferring platform that has gained popularity during the pandemic, has been targetedby hackers using it to steal people’s personal data.
“Although not every domain registered in the last month may be malicious, it’s possible that these websites offering consulting and business loans could be set up to trick people into sharing money or personal information,” said Sadler. “Always check the URL of the domain and verify the legitimacy of the service by calling them directly before taking action.”
TopicsCybersecurityCOVID-19
Samsung Galaxy Note7 teardown reveals the magic behind the phone's iris scanner2025-02-28 23:06
薩拉赫續約不暢或走人 ? 馬內:我想和姆巴佩搭檔2025-02-28 22:50
荷蘭國腳涉嫌故意殺人+販毒 卷入1.2億歐毒品巨案2025-02-28 22:42
武磊西甲生涯再遇考驗 西班牙人老板正洽談轉讓球隊2025-02-28 22:32
Give your kitchen sponge a rest on this adorable bed2025-02-28 22:12
皇馬一周內簽姆巴佩 !簽字費8000萬歐 年薪2500萬2025-02-28 22:09
薩拉赫結束進球荒 4個賽季英超進球20+隊史第一2025-02-28 22:08
烏超隊主場遭俄空襲炸毀 調侃 :最危險的軍事設施2025-02-28 21:51
Tesla's rumored P100D could make Ludicrous mode even more Ludicrous2025-02-28 21:48
波切蒂諾再談皇馬:本澤馬絕對犯規 不懂為何不吹2025-02-28 21:48
Plane makes emergency landing after engine rips apart during flight2025-02-28 23:15
荷蘭國腳涉嫌故意殺人+販毒 卷入1.2億歐毒品巨案2025-02-28 23:00
博格巴 :C羅從來都不會是曼聯的問題 他是隊史最佳2025-02-28 22:34
多納魯馬欲回意甲!尤文或成下一站 2023年最適合2025-02-28 22:27
Samsung Galaxy Note7 teardown reveals the magic behind the phone's iris scanner2025-02-28 22:25
曝中超三支球隊都會參加亞冠 派U21隊出戰2025-02-28 22:19
官方 :魯能足校教練張濤出任山東女足主帥 曾帶出崔鵬王永珀2025-02-28 22:04
12日賠率 :曼聯主場難勝熱刺 拜仁米蘭均鞏固榜首2025-02-28 21:50
Old lady swatting at a cat ends up in Photoshop battle2025-02-28 21:36
武磊與西班牙人談過未來 留隊因教練組仍認可其能力2025-02-28 21:26