Last week, we wrote about a scam that spoofs the World Health Organization (WHO) in the hopes of grabbing personal information.

As the pandemic rages on, more of these phishing emails will hit the wire, many of them spoofing major organizations like the WHO.

The following email does just that. In this email, which is purported to come from the director of the WHO, the idea is to ask for money in exchange for a huge reward ($820,000), as well as obtain personal information. Here's the email:



Note that the email asks to send information to a Gmail address: worldwhorg@gmail.com

Further, it's registered to this domain: who.international—the actual domain of the real WHO is who.int.

Subscribe to Our Attack Briefs for More Research