The National CERT of the Republic of Serbia informs the citizens and companies that a phishing campaign abusing the Covid-19 pandemic, targeting the public institutions and companies is under way. An email sent from address firstname.lastname@example.org, contains a fake notification from the Institute of Public Health of Serbia „Dr Milan Jovanović Batut“ about free distribution of protective gear to all registered individuals, and an attachment titled „preventive gear application form.pdf.zip“. This fake registration requires filling-in of the attached application form and it being sent by the end of working hours, thus abusing the emergency procedure and starting the download of malicous software - malware LokiBot. More on this malware can be found here
The National CERT advises all citizens and companies who receive such notification not to open the attachment contained in the email and report the phishing attempt to email@example.com
Here you can find a warning issued by the Department of prevention of high tech crime, of the Ministry of Interior.