Beware of Vaccination Certificate Scams … Even Scammers Have Secure Connections Now

I have been investigating the QR format used for vaccination status data, and this appeared in my InBox:

The email had warning signs already, such as having an email address that wasn’t the NHS, and for the roll-over link to come from a non-trusted source. But, look, it’s an “HTTPs” link, so it must have a valid certificate. On clicking on the link (in my sandboxed and isolated environment) it took me too:

On checking the certificate, it is certainly valid, and there’s a secure connection created:

Scrolling down we get:

--

--

Prof Bill Buchanan OBE FRSE
ASecuritySite: When Bob Met Alice

Professor of Cryptography. Serial innovator. Believer in fairness, justice & freedom. Based in Edinburgh. Old World Breaker. New World Creator. Building trust.