Yup Keystone

, big phishing scam now is sending an email with attachment looking like it came from the CDC, saying something like "here's a chart of Covid-19 in your area". If the person opens the attachment, malware is loaded onto their computer to steal personal info like financials and such. They can even place a 'Keylogger" program on your computer to record each keystroke you enter for passwords and other info they want to capture and steal. You're correct with your warning to watch for suspicious emails, attachments and website links.
Why just this morning, I received an email looking like it came from my bank, saying they lost some security info, and wanted me to use the link provided to login and enter this info. The wording in the description had several grammatical errors and phrases that didn't make total sense. Hovering over the login link, revealed it wasn't the banks URL, but some jumbled character that would direct the recipient to some similar looking bank page to capture any info one would enter. You got to be careful out there.
