The Cybersecurity and Infrastructure Security Agency issued an alert concerning an unknown malicious cyber actor spoofing the Small Business Administration's COVID-19 relief webpage via phishing emails.
These emails include a malicious link to a fake page used for hostile re-directs and credential stealing. The alert and additional resources are available on ICBA’s Cyber and Data Security Guide.