NHIF warns of increasing cyberattacks
In recent weeks, the National Health Insurance Fund (NHIF) has been subjected to an escalating wave of cyberattacks targeting Bulgarian citizens. The institution is sounding the alarm about a sharp increase in reports of fake emails sent on its behalf. These fraudulent messages are part of a broad phishing campaign that aims to deceive recipients and prompt them to disclose sensitive personal and financial information.
According to an NHIF announcement, the fake emails typically require the user to take a specific action. This type of message is a classic method for carrying out a cyberattack that can jeopardize the security of the recipient's device. This usually happens by embedding malicious code or software that is activated when a user clicks on an attached file or link.
The NHIF categorically warns that the institution never sends attached files or hyperlinks via email related to the status of insured persons, owed amounts, paid funds, or any other personal information.
Details of the phishing attack
The scale of the campaign became clear after the Ministry of Interior (MoI) confirmed that they are investigating an active phishing scheme operating under the guise of the NHIF. The attack is precisely targeted at insured persons and is being widely distributed via email.
The content of the fake messages is carefully prepared to mislead recipients. They contain a call for "a refund of overpaid amounts from health insurance contributions due to a 'calculation error'". To receive this 'refund,' the user is prompted to fill in their bank and personal details in an attached file or via a web form. This is how hackers are trying to gain access to bank accounts and other confidential information.
The visual design of the document is also part of the fraud. The fake messages have a "deceptive appearance" that skillfully imitates the official NHIF documentation, including using its distinctive signs and logos. This gives the fraud a semblance of credibility and further misleads recipients.
In response to the frequent incidents, the NHIF urges citizens to be extremely careful and not to trust such emails. Upon receiving suspicious messages, they strongly recommend immediately reporting them to the institution itself, as well as to the competent authorities responsible for investigating cybercrimes. This is the only way to help fight against fraudsters and protect other citizens from potential abuse.