https://tech.newstatesman.com/security/phishing-campaign-targets-nhsx-contact-tracing-app-launch

A phishing campaign that sought to exploit the news of the NHS launching a coronavirus contact tracing app was shut down at the end of last week after targeting 21,000 email users.

The email’s subject line read “COVID-19: Emergency advice from the NHS”, and asked email users to click a link to see an updated list of new coronavirus cases in their city. Clicking on the link prompted a fake Microsoft Outlook page to load, into which the user was asked to enter their email address and password. The credentials were snatched to be sold online for malicious purposes, such as credential stuffing attacks.