Fake Online Coronavirus Map Delivers Well-known Malware

How to protect yourself:

  • Avoid opening attachments sent unbidden in emails — even if they appear to come from someone you know.
  • Please be advised to stick to verified COVID-19 tracking maps and to double-check the URL of a linked website before clicking.
  • Be aware of email scammers taking advantage of coronavirus fears to impersonate health officials and trick people into giving up personal information
Summary:
A malicious website pretending to be the live map for Coronavirus COVID-19 Global Cases by Johns Hopkins University is circulating on the internet, waiting for unwitting internet users to visit the website. Visiting the website infects the user with the AZORult trojan, an information-stealing program which can exfiltrate a variety of sensitive data. It is likely to be spread via infected email attachments, malicious online advertisements, and social engineering. Furthermore, anyone searching the internet for a Coronavirus map could unwittingly navigate to this malicious website.

A trusted source to use in a time like this would be the Centers of Disease Control and Prevention (CDC).

Information Technology
it@gc.cuny.edu
it.cuny.edu 
 
Reference:
https://blog.reasonsecurity.com/2020/03/09/covid-19-info-stealer-the-map-of-threats-threat-analysis-report/
 

Submitted on: MAR 16, 2020

Category: IT - Alerts