Cybercriminals remain indifferent to what threat themes they use for phishing schemes. Global conflict and tragedy are in fact some of their favorite phishing threat options.
From Israel-Hamas conflicts to Russia-Ukraine tensions, cybercriminals look to exploit these situations by sending out fraudulent emails, creating fake donation websites, or posing as reputable organizations or news sources.
These scams are designed to deceive individuals into donating money, revealing personal information, granting access to accounts, or a myriad of other goals including general disinformation and swaying public sentiment.
One common tactic involves phishing emails appearing to come from legitimate organizations or charities claiming to support victims or provide “news” updates related to a conflict. These emails may contain links leading to fake websites designed to steal login credentials or personal information. Sometimes, they even use emotionally charged language to evoke sympathy or drive a desired, immediate action.
Israel-Hamas Conflict Scams
Fake Donation Campaigns:
Scammers create fake charity websites or crowdfunding pages claiming to support victims affected by the conflict. They use emotionally charged content to lure individuals into making donations, which end up in the hands of the scammers instead of reaching those in need.
Phishing Emails:
Fraudulent emails pose as humanitarian organizations or news outlets, soliciting donations or providing fraudulent updates on the conflict. These emails contain links to malicious websites aiming to steal personal information or login credentials.
Russia-Ukraine Conflict Scams
Disinformation Campaigns: Scammers spread false news or sensationalized stories about the conflict through social media or emails. They capitalize on the uncertainty and fear surrounding the situation to manipulate people's opinions or solicit engagement leading to phishing attempts.
Malware Distribution: Cybercriminals use fake news articles or links related to the conflict to lure users into downloading malware disguised as informative content or videos from the frontlines. Clicking on these links can lead to malware installation on devices, compromising personal data.
Tips to Identify and Avoid These Scams:
Verify Sources: Double-check the legitimacy of donation requests or news updates by directly visiting official charity websites or reputable news sources instead of clicking on links in emails or social media posts.
Check URLs and Email Addresses: Scrutinize website URLs and email addresses for misspellings or slight variations from official domains. Be cautious and look for any suspicious discrepancies.
Don't Rush Donations: Avoid giving in to immediate emotional prompts or high-pressure tactics. Take time to research and ensure the legitimacy of donation platforms or campaigns.
Stay Informed via Trusted Sources: Rely on established news outlets and verified social media accounts for accurate information on global conflicts. Avoid engaging with unverified or sensationalist content.
Enable Security Measures: Use robust security measures like two-factor authentication (2FA) on accounts to prevent unauthorized access and never divulge or share your login details or authenticate a request that’s not coming from you with multi-factor authentication (MFA).
Educate Yourself and Others: Spread awareness about these scams among colleagues, family, and friends. Encourage them to verify sources before making donations or sharing sensitive information online.
The Bottom Line
By staying vigilant, verifying sources, and being cautious with online interactions related to global conflicts, individuals can significantly reduce the risk of falling victim to these malicious schemes. Being informed and proactive is key to protecting oneself and others from exploitation.
