Italy warns of phishing scams exploiting health cards and tax invoice emails

Italian authorities have alerted the public to two recent phishing campaigns. One pretends to be official communications about the national health card, using forged emails that urge recipients to verify personal data on a counterfeit portal. The other targets professionals and businesses with bogus certified‑email (PEC) messages that appear to contain electronic tax invoices, embedding malicious links that trigger PowerShell scripts on Windows computers. Both scams imitate government formatting, create a sense of urgency, and aim to steal personal, credential or financial information. Victims are advised to verify sender addresses, avoid clicking unexpected links or opening attachments, and report suspicious messages to the appropriate agencies.

The campaigns highlight that even trusted channels such as PEC do not guarantee authenticity, and users should access official sites directly rather than through emailed hyperlinks. Cyber‑security experts recommend deleting doubtful messages, checking official notices on agency websites, and using caution when providing sensitive data online.