--- title: "COVID-19 Opens the Door to New Phishing Attacks. Here’s What You Need to Know." id: "50105" type: "post" slug: "covid-19-opens-the-door-to-new-phishing-attacks-heres-what-you-need-to-know" published_at: "2020-05-06T20:13:09+00:00" modified_at: "2026-03-17T03:26:33+00:00" url: "https://associationsnow.com/2020/05/06/covid-19-opens-the-door-to-new-phishing-attacks-heres-what-you-need-to-know/" markdown_url: "https://associationsnow.com/2020/05/06/covid-19-opens-the-door-to-new-phishing-attacks-heres-what-you-need-to-know.md" excerpt: "Taking advantage of the current crisis and new tech tricks, email-based phishing attackers are upping their game at the moment. Here are a few things you should watch for." taxonomy_category: - "Marketing / Communications" taxonomy_post_tag: - "AssociationsNow" - "cybersecurity" - "phishing" - "remote work" - "Technology" taxonomy_content_format: - "Article" taxonomy_role: - "Director" - "Manager" - "VP" taxonomy_persona: - "Association Professionals" --- [Home](https://associationsnow.com/) » [Articles](https://associationsnow.com/format/article/) » COVID-19 Opens the Door to New Phishing Attacks. Here’s What You Need to Know. It turns out that phishing attackers read the news, too. And that’s bad news for remote workers far and wide, as attackers seize on new opportunities created by the coronavirus pandemic to plant malicious traps in workers’ inboxes. They also have a new technical trick up their sleeve. Here’s what you need to know: **Phishing attacks mimic tools like Microsoft Teams, Skype, and Zoom.** Email attackers are taking advantage of the increased use of remote tools to hide their attacks. As the research firm Abnormal Security [told the website Dark Reading (opens in a new tab)](https://www.darkreading.com/cloud/fake-microsoft-teams-emails-phish-for-credentials/d/d-id/1337717) , the messages are designed to look like those sent by the apps. “Abnormal has observed these attacks being sent to our customers in industries such as energy, retail, and hospitality,” said Ken Liao, the firm’s vice president of cybersecurity strategy. “However, these attacks are not targeted and intentionally made to be generic by attackers so they could be sent to anybody.” **Phishing attackers are using bot-fighting tools to get around spam filters.** The reCaptcha wall, which Google and other providers use to separate real from fake traffic, is increasingly being used by malicious email attackers to prevent URL-detecting tools from figuring out whether a message has a phishing payload, [the security firm Barracuda reports (opens in a new tab)](https://blog.barracuda.com/2020/04/30/threat-spotlight-malicious-recaptcha/) . “This technique is commonly used by legitimate companies to deter bots from scraping content,” the company’s Jonathan Tanner explains on the company’s blog. “Because end users are so familiar with being asked to solve a reCaptcha and prove they aren’t a robot, malicious use of a real reCaptcha wall also lends more credibility to the phishing site, making users more likely to be tricked.” The result is that malicious messages are more likely to appear in inboxes than they were previously. **Federal programs are being spoofed, too.** [As IBM’s Security Intelligence website reports (opens in a new tab)](https://securityintelligence.com/posts/new-study-shows-consumers-could-be-vulnerable-to-covid-19-spam/) , a number of phishing messages have been sent out in recent weeks taking advantage of the high interest in the federal Paycheck Protection Program. “Cybercriminals are being very calculated with their attacks and continue to pivot their tactics to lure victims,” the article states. “In fact, IBM X-Force saw that more than 50 percent of all COVID-19-related spam observed since the onset of the pandemic was sent in the two first weeks of April alone, coinciding with when the U.S. small-business relief loan program became available and stimulus checks started being issued.” (weerapatkiatdumrong/iStock/Getty Images Plus) [Ernie Smith](https://associationsnow.com/author/ernie-smith/) Ernie Smith is a former senior editor for Associations Now. [More articles by this author](https://associationsnow.com/author/ernie-smith/) Tags: [#cybersecurity](https://associationsnow.com/tag/cybersecurity/) [#phishing](https://associationsnow.com/tag/phishing/) [#remote work](https://associationsnow.com/tag/remote-work/) [#Technology](https://associationsnow.com/tag/technology/) **Stay Informed** [Subscribe to our free newsletter](https://associationsnow.com/newsletter/) , *Associations Now Daily News*, to find out what’s happening in the association world every business day. ## You Might Like - [PodcastAssociations Now Presents: Beyond the Tech Stack: How AI Is Changing the Association PlaybookOctober 29, 2026](https://associationsnow.com/2026/10/29/associations-now-presents-beyond-the-tech-stack-how-ai-is-changing-the-association-playbook/) - [PodcastSecuring Identity: What Associations Need to Know About Verifiable CredentialsJune 25, 2025](https://associationsnow.com/2025/06/25/securing-identity-what-associations-need-to-know-about-verifiable-credentials/) - [PodcastAssociations NOW Presents: More Than Marketing: The Power of Strategic CommunicationsJuly 30, 2026](https://associationsnow.com/2026/07/30/associations-now-presents-more-than-marketing-the-power-of-strategic-communications/) - [PodcastAssociations NOW Presents: Why Slower Marketing Can Drive Stronger Member Engagement (Episode 27)June 25, 2026](https://associationsnow.com/2026/06/25/associations-now-presents-why-slower-marketing-can-drive-stronger-member-engagement-episode-27/) ## Comments **Comments are for ASAE members.** [Learn more about comments on this site.](https://associationsnow.com/comments/) [Log in](https://associationsnow.com/login?redirect_to=https%3A%2F%2Fassociationsnow.com%2F2020%2F05%2F06%2Fcovid-19-opens-the-door-to-new-phishing-attacks-heres-what-you-need-to-know%2F%23comments) to your member account or [join ASAE](https://my.asaecenter.org/select-a-membership-type/) !