The Centre on Sunday has warned of a major phishing attack in India that promises free Coronavirus testing across the country. The government warning says a big-scale cyberattack has been planned by the cyber crooks where they can use Covid-19 as bait to steal personal & financial details of millions of people.

According to Indian Computer Emergency Response Team (CERT-In), potential phishing attacks can impersonate government, departments, agencies and trade bodies. It said "Phishing campaign is likely to impersonate government agencies, departments & trade associations that have been tasked to oversee the disbursement of the government financial aid."

Warning its customers about the attack, State Bank of India – country’s largest commercial lender tweeted - "Attention! It has come to our notice that a cyber-attack is going to happen in major cities of India. Please refrain yourself from clicking on emails coming from ncov2019@gov.in with a subject line Free COVID-19 Testing."

SBI said, "We have got a worrying report from the CERT-In that a phishing attack is likely to be carried out by cybercriminals using the suspicious email - ncov2019@gov.in from 21st June."

The advisory said, “The cybercriminals are claiming to have a two million individual or citizen's email IDs & are planning to send email with subject "Free COVID-19 Testing" inciting personal details from residents of following cities - Mumbai, Delhi, Hyderabad, Chennai & Ahmedabad".

Method to protect yourself cyber-attack

How to identify a phishing e-mail?

To recognize a phishing email, always check the complete email ID of the sender.

Be careful with emails & files received from unknown senders, especially if they are giving special deals or discounts, or providing any free service related to “Covid-19”.

What to do if you get a phishing e-mail?

Never click on any link, or scan the QR code in such mails. Don’t give your personal information, ID or passwords.

Never open unknown attachments or click on any links inside the emails.

Government has issued preventive measures wherein it asked people not to open/click any attachment in an unsolicited email, SMS through social media.

The government advisory also said, "Beware of email addresses; spelling errors in the emails; websites & unfamiliar email senders”. It also warned people not to submit personal financial details on any unfamiliar/unknown websites or links. Be careful of emails, links providing discounts or offers like Covid-19 testing, aid, rewards, winning prize, cashback offers".