Phishing attack spoofs World Health Organization to steal email credentials

In a blog post published Friday, Abnormal Security explained how this latest campaign works. The initial phishing email claims to be sent by the WHO with a sender's address of support@who.international. Displaying the WHO's familiar logo, the email states that the World Health Organization has sent you a message, inviting you to click a link for Open Message. The URL for this link is hidden behind the text, so users can't clearly see it.