Cybersecurity, Common Sense, And COVID-19 (Coronavirus Disease 2019)

The Centers for Disease Control and Prevention (CDC) reports that it is "responding to an outbreak of respiratory disease caused by a novel (new) coronavirus that was first detected in China and which has now been detected in 60 locations internationally, including in the United States." While early steps are being taken to protect health and mitigate the spread of disease, cybercriminals have already taken advantage of public anxiety. A Washington State agency reports a phishing campaign in which the cybercriminals impersonate the CDC, "warning of new infections and promising to provide a list of active infections in the surrounding area if users click on a link." Clicking the link leads to the download of malware, with potential compromise of the device and associated workplace systems. The agency suggests that employers remind staff of anti-phishing protocol. These include exercising caution before opening emails from unknown parties, confirming the identity