German government loses 'tens of millions' in COVID-19 phishing attack

Hackers impersonated NRW's website for distributing emergency coronavirus funding

Phishing

Update: The NRW's Ministry of Economic Affairs website is now back online, enabling the self-employed and small business owners to once again apply for Coronavirus emergency aid. The NRW police say that, so far, there have been no known cases of hackers successfully managing to siphon funds. 

The government of North Rhine-Westphalia (NRW) in western Germany has reportedly lost tens of millions of Euros after hackers impersonated its website for distributing emergency coronavirus funding.

Hackers not only set up a website impersonating the legitimate NRW Ministry of Economic Affairs website but also used the personal details provided by users to file requests and collect funds on their behalf.

The blame has been attributed to NRW officials who had failed to set up a secure method of distributing funds. As opposed to other German states, which have asked users to download a form and mail it or to upload scanned documents in order to verify their identity, NRW only required local applicants to fill out an online form.

This allowed cybercriminals to impersonate applicants who had provided their personal details to the unofficial website and file requests for government aid, replacing only the bank account where funds were to be wired.

The scheme lasted for nearly a month, from mid-March until 9 April, when the NRW government finally took down the website and suspended payments.

However, the damage had already been done. German tech news site Heise reported that prior to the website being taken down, the local police had received 576 official reports of fraud related to the scam.

The situation in NRW is the latest example of hackers using coronavirus-related content in order to reap benefits from the outbreak and subsequent lockdown.

Related Resource

2020 report: The threat posed by shadow IoT devices

Unsanctioned IoT devices open a portal for chaos across the network

Download now

Last week, Google issued a warning to users working from home during the lockdown about a rise in the number of coronavirus-based phishing attacks, many of which are being sent as emails. The company stated almost two in five phishing attempts over Gmail were now related to COVID-19.

According to the BBC, about £2 million has been lost to coronavirus-related fraud in the UK. Earlier this month, both US and UK cybersecurity officials warned that hackers, some of them potentially state-backed, were using the disruption caused by the coronavirus pandemic to exploit businesses and the wider public.

Featured Resources

Digital document processes in 2020: A spotlight on Western Europe

The shift from best practice to business necessity

Download now

Four security considerations for cloud migration

The good, the bad, and the ugly of cloud computing

Download now

VR leads the way in manufacturing

How VR is digitally transforming our world

Download now

Deeper than digital

Top-performing modern enterprises show why more perfect software is fundamental to success

Download now

Recommended

The future tech helping battle the pandemic
Technology

The future tech helping battle the pandemic

20 Oct 2020
Transforming training with virtual reality
Careers & training

Transforming training with virtual reality

20 Oct 2020
Salesforce aims to help manage coronavirus vaccine demand
sales & CRM

Salesforce aims to help manage coronavirus vaccine demand

29 Sep 2020
Why COVID-19 could spur a learning revolution
Careers & training

Why COVID-19 could spur a learning revolution

29 Sep 2020

Most Popular

Why you should prioritise privileged access management
Sponsored

Why you should prioritise privileged access management

9 Oct 2020
Sopra Steria confirms it was hit by new Ryuk ransomware variant
Security

Sopra Steria confirms it was hit by new Ryuk ransomware variant

26 Oct 2020
The enemy of security is complexity
Sponsored

The enemy of security is complexity

9 Oct 2020