Karlston Posted March 13, 2020 Share Posted March 13, 2020 Live Coronavirus Map Used to Spread Malware Cybercriminals constantly latch on to news items that captivate the public’s attention, but usually they do so by sensationalizing the topic or spreading misinformation about it. Recently, however, cybercrooks have started disseminating real-time, accurate information about global infection rates tied to the Coronavirus/COVID-19 pandemic in a bid to infect computers with malicious software. A recent snapshot of the Johns Hopkins Coronavirus data map, available at coronavirus.jhu.edu. In one scheme, an interactive dashboard of Coronavirus infections and deaths produced by Johns Hopkins University is being used in malicious Web sites (and possibly spam emails) to spread password-stealing malware. Late last month, a member of several Russian language cybercrime forums began selling a digital Coronavirus infection kit that uses the Hopkins interactive map as part of a Java-based malware deployment scheme. The kit costs $200 if the buyer already has a Java code signing certificate, and $700 if the buyer wishes to just use the seller’s certificate. “It loads [a] fully working online map of Corona Virus infected areas and other data,” the seller explains. “Map is resizable, interactive, and has real time data from World Health Organization and other sources. Users will think that PreLoader is actually a map, so they will open it and will spread it to their friends and it goes viral!” The sales thread claims the customer’s payload can be bundled with the Java-based map into a filename that most Webmail providers allow in sent messages. The seller claims in a demonstration video that Gmail also allows it, but the video shows Gmail still warns recipients that downloading the specific file type in question (obscured in the video) can be harmful. The seller says the user/victim has to have Java installed for the map and exploit to work, but that it will work even on fully patched versions of Java. “Loader loads .jar files which has real working interactive Coronavirus realtime data map and a payload (can be a separate loader),” the seller said in the video. “Loader can predownload only map and payload will be loaded after the map is launched to show map faster to users. Or vice versa payload can be predownloaded and launched first.” It’s unclear how many takers this seller has had, but earlier this week security experts began warning of new malicious Web sites being stood up that used interactive versions of the same map to distract visitors while the sites tried to foist the password-stealing AZORult malware. As long as this pandemic remains front-page news, malware purveyors will continue to use it as lures to snare the unwary. Keep your guard up, and avoid opening attachments sent unbidden in emails — even if they appear to come from someone you know. A tip of the hat to @holdsecurity for a heads up about this malware offering. Source: Live Coronavirus Map Used to Spread Malware (KrebsOnSecurity - Brian Krebs) Link to comment Share on other sites More sharing options...
duddy Posted March 14, 2020 Share Posted March 14, 2020 ALERT! Hackers are using coronavirus maps to attack your computer, steal information If there weren't enough ways already to loot people's money online, hackers have now started to attack users' computers and steal important information using coronavirus maps. According to Shai Alfasi, a security researcher at Reason Labs, hackers are using these maps to steal information of users including user names, passwords, credit card numbers, and other info stored in your browser. The fraudsters have designed websites related to coronavirus, asking users to download an application that keeps you updated on the outbreak. The application shows you a map of how COVID-19 is spreading. It is used by the hackers to generate a malicious binary file and install it on your computer. Even though the maps are real, they are generated from a different URL from the original source. As of now, only the Windows computers have been hit but Alfasi expects attackers to work on a new version that might affect other systems too. The researcher said that a malicious software known as AZORult is being used for this purpose. The software steals data from your computer and infect it with other malware as well. The software is allegedly used to steal browsing history, cookies, ID/passwords, cryptocurrency and more. Coronavirus impact The Global stock markets suffered a historic setbacks on Friday over the coronavirus crisis. The virus has killed nearly 5,000 and infected sport, schools and society across the planet. Japan's stock market fell more than 10 percent on Friday, following the worst day on Wall Street since the crash of 1987 as traders scrambled to sell everything on fears the virus will catapult the world into a deep recession. Meanwhile, Italy has become the second country after China to report over 1000 deaths due to coronavirus. The coutry has reported 1,016 deaths, adding that at least 15,113 people are infected with the virus. Civil protection officials say 1,258 have recovered, although the number of cases has gone up by 2,651 since Wednesday. Italy is the world`s worst-hit country after China. Source Link to comment Share on other sites More sharing options...
Karlston Posted March 14, 2020 Author Share Posted March 14, 2020 Similar topic merged. Link to comment Share on other sites More sharing options...
duddy Posted March 15, 2020 Share Posted March 15, 2020 16 hours ago, Karlston said: Similar topic merged. I note that on merging of my post with yours, the Tags of mine ave disappeared. Saying otherwise, this also suggests that "Merging" is akin to appending the later post as a "Reply" Am I correct dear @Karlston? Link to comment Share on other sites More sharing options...
vcspixr Posted March 15, 2020 Share Posted March 15, 2020 Coronavirus Tracker v1.0.0 (Free) and Coronavirus Statistics v1.0.4 [Adfree] posted in mobile software updates - not saying they are malicious but just to be careful. Link to comment Share on other sites More sharing options...
Karlston Posted March 15, 2020 Author Share Posted March 15, 2020 6 hours ago, duddy said: I note that on merging of my post with yours, the Tags of mine ave disappeared. Saying otherwise, this also suggests that "Merging" is akin to appending the later post as a "Reply" Tags are only for Topics. When topics are merged only the tags of the remaining topic stay. Tags aren't merged. Merging two topics moves all the posts of one topic into another topic, with posts inserted in time order. The merged (moved) topic disappears, only a link to the new location remains, but that link is optional at the discretion of the staff member doing the merging. When we merge similar topics, we merge the newer topic into the older. The older topic was posted first, so it "wins" and gets to stay. Example... Older Topic 1 has posts P1, P2 , and P3 Newer Topic 2 has posts P4 and P5. Merging Topic 2 into Topic 1 may make Topic 1 now look like P1, P2, P4, P3, P5 (time order). HTH Link to comment Share on other sites More sharing options...
kasper Posted March 16, 2020 Share Posted March 16, 2020 try this new map and statistics https://ncov2019.live Link to comment Share on other sites More sharing options...
kasper Posted April 30, 2020 Share Posted April 30, 2020 new statistics site https://cov19.cc Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.