German government loses 'tens of millions' in COVID-19 phishing attack

Hackers impersonated NRW's website for distributing emergency coronavirus funding


Update: The NRW's Ministry of Economic Affairs website is now back online, enabling the self-employed and small business owners to once again apply for Coronavirus emergency aid. The NRW police say that, so far, there have been no known cases of hackers successfully managing to siphon funds. 

The government of North Rhine-Westphalia (NRW) in western Germany has reportedly lost tens of millions of Euros after hackers impersonated its website for distributing emergency coronavirus funding.

Advertisement - Article continues below

Hackers not only set up a website impersonating the legitimate NRW Ministry of Economic Affairs website but also used the personal details provided by users to file requests and collect funds on their behalf.

The blame has been attributed to NRW officials who had failed to set up a secure method of distributing funds. As opposed to other German states, which have asked users to download a form and mail it or to upload scanned documents in order to verify their identity, NRW only required local applicants to fill out an online form.

This allowed cybercriminals to impersonate applicants who had provided their personal details to the unofficial website and file requests for government aid, replacing only the bank account where funds were to be wired.

Advertisement - Article continues below

The scheme lasted for nearly a month, from mid-March until 9 April, when the NRW government finally took down the website and suspended payments.

Advertisement - Article continues below

However, the damage had already been done. German tech news site Heise reported that prior to the website being taken down, the local police had received 576 official reports of fraud related to the scam.

The situation in NRW is the latest example of hackers using coronavirus-related content in order to reap benefits from the outbreak and subsequent lockdown.

Related Resource

2020 report: The threat posed by shadow IoT devices

Unsanctioned IoT devices open a portal for chaos across the network

Download now

Last week, Google issued a warning to users working from home during the lockdown about a rise in the number of coronavirus-based phishing attacks, many of which are being sent as emails. The company stated almost two in five phishing attempts over Gmail were now related to COVID-19.

According to the BBC, about £2 million has been lost to coronavirus-related fraud in the UK. Earlier this month, both US and UK cybersecurity officials warned that hackers, some of them potentially state-backed, were using the disruption caused by the coronavirus pandemic to exploit businesses and the wider public.

Featured Resources

The case for a marketing content hub

Transform your digital marketing to deliver customer expectations

Download now

Fast, flexible and compliant e-signatures for global businesses

Be at the forefront of digital transformation with electronic signatures

Download now

Why CEOS should care about the move to SAP S/4HANA

And how they can accelerate business value

Download now

IT faces new security challenges in the wake of COVID-19

Beat the crisis by learning how to secure your network

Download now


Advertisement Feature

How has coronavirus impacted business IT?

1 Jun 2020

A third of businesses plan to increase IT spending despite the pandemic

26 May 2020

UK delays rollout of NHS contact-tracing app

19 May 2020
data protection

Digital activists sound the alarm over UK's 'coronavirus datastore' plans

18 May 2020

Most Popular

Microsoft Windows

Microsoft warns users not to install Windows 10's May update

28 May 2020
data breaches

EasyJet faces class-action lawsuit over data breach

26 May 2020
cyber security

Microsoft bans Trend Micro driver from Windows 10 for "cheating" hardware tests

27 May 2020