Spoofed SBA Website is Stealing Credentials

Sunwest Bank is issuing a strong warning to their customers to watch out for a new fraud related scheme associate with Covid-19 and the Paycheck Protection Program.

Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) is currently tracking an unknown malicious cyber actor who is spoofing the Small Business Administration (SBA) COVID-19 loan relief webpage via phishing emails. These emails include a malicious link to the spoofed SBA website that the cyber actor is using for malicious re-directs and credential stealing.

These links are fraudulent!

For more information and technical details, visit: https://go.sunwestbank.com/e/293582/ncas-alerts-aa20-225a/b612nw/801660872?h=tXetFNbbzAXXkvfD27AeBAdIcXJrVYy7tdxCcupBEn8.

If you receive an email from disastercustomerservice@sba[.]gov or with the subject line, SBA Application – Review and Proceed, DarkHound strongly recommends that you do not follow links contained within or input any information into any online forms.

If you are a Sunwest Bank client and have already shared confidential information in error, please contact your bank ASAP.

This type of scam is not unique, and unfortunately, is occurring with increased frequency. Please remain vigilant identifying scams related to the Coronavirus (COVID-19).

If you need assistance with your business cybersecurity needs contact DarkHound at [email protected].

Image Source: https://www.pexels.com/photo/buses-on-road-near-high-rise-buildings-3709402/