“Hack-for-hire” groups operating in India are spoofing World Health Organization emails to steal credentials from employees at financial services, consulting and healthcare firms around the world. Spear-phishing emails have been appearing the U.S., U.K., Slovenia, Canada, India, Bahrain and Cyprus. Google has been tracking about 270 nation-state sponsored hacking groups across 50 countries that are known to target the company’s users. Many of these groups are using COVID-19 as a lure for their attacks.”]
Source: https://www.govinfosecurity.com/hack-for-hire-groups-spoof-who-emails-to-steal-data-a-14348