Expert Insight On Covid-19 Test & Trace SMS Phishing Attack

The NHS Test & Trace scheme is already being exploited by cybercriminals, with a new smishing (SMS-phishing) attack telling citizens that they have been in contact with someone who has COVID-19. An example of the text message is below. These kinds of fake text messages typically include a link to a malicious site, or will ask the receiver to share personal information that could then be used to commit identity fraud.

NHS has written specific guidelines on how they will contact people in the Test & Trace scheme, which can be found here.