image credit: pixabay
A new campaign is targeting people with messages that seem to come from the U.S. Department of Labor (DoL), trying to trick them into opening a DOC file, enabling macros, and eventually deploying the TrickBot malware.
Like many of today’s malicious campaigns, this new one tries to use COVID-19 as a cover to give it a sense of urgency. The use of an official government institution is a well-known tactic and, in this case, the bad actors impersonate the Department of Labor.
The email message talks about a provision called the Family and Medical Leave Act (FMLA), which allows sick employees to receive benefits when they miss work. Given the economic situation, the email aims to convince people that they need to read a document attached to the email.
