The Indian government has warned of an imminent threat of a massive phishing attack targeting unsuspecting citizens. According to the Indian Computer Emergency Response Team (CERT-In), malicious actors could imitate government organizations to steal sensitive personal data and financial information in a coordinated attack that is expected to start this week.

CERT-In issued advisory on COVID 19-related Phishing Attack Campaign by Malicious Actors. pic.twitter.com/x8WO3TseCM

Of course, the fake websites and the people running them have no affiliation with any government agency. So, any information shared with them by unsuspecting users might be used to siphon off money from their accounts. These phishing emails could target up to 20 lakh (2 million) email IDs belonging to individuals and small organizations.

There is an imminent threat of a massive phishing attack in India by Lazarus, the North Korean hacking group, starting today.