Hackers exploit coronavirus fear to launch malware and cyber attacks

The mysterious but deadly Coronavirus, or 2019-nCoV is a never-before-seen pathogen of the coronavirus that killed 349 people in mainland China and another 299 in Hong Kong between 2002 and 2003.

The spread of the virus is currently causing a global panic; new cases are reported in various parts of the world. Sadly, this also gives rise to fake news and racism.

While some out there are using the outbreak to spread fake hysteria, security firm Proofpoint reports that cyber criminals are leveraging fears surrounding the outbreak to spread computer viruses.

From coronavirus to computer virus

In a Proofpoint blog post, the threat intelligence team points out that hackers are using malware and email viruses to carry out malicious activity and spread the computer virus “to dozens of countries”.

“Global events often capture the world’s attention with a combination of wide recognition and a sense of urgency; but they are also unfortunately likely candidates for threat actor campaigns.” 

Proofpoint explained that TA542, hacker collective, “is leveraging the recent coronavirus health scare and climate change discussion to try and secure clicks.

Emails and fake websites

According to Proofpoint, the group uses email attacks to target a dozen countries world-wide with Greta Thunberg-themed lures”; and adds that the group is capable of carrying out multiple attacks at the same time.

“Our threat research team is tracking TA542’s use of the Coronavirus-themed email lures and a revival of their Greta Thunberg-themed campaigns, while also examining threat actors who are starting to register Coronavirus-themed websites that could be used for later fraud.”

Some of the emails contain the subject line “京都府山城南保健所福祉室” (which translates Kyoto Prefectural Yamashiro Minami Public Health Center Welfare Room) and “京都府共同募金会” (Kyoto Prefectural Fundraiser)

The threat intelligence team also observed other coronavirus-themed attacks and scams, such as the registering of “coronavirus-themed URLs and website.

One example of a fake website can be seen below, and plays on people’s “face mask fears”. The site’s heading lures users in with, “Get your Coronavirus mask today,” and secures the deals with, “protect yourself and your family.”

How to protect yourself

Proofpoint urges netizens to exercise caution when it comes to opening emails and visiting websites related to current events; “particularly websites that appear to ask you to take urgent action”.

In addition, users are urged to visit trusted and verified sites only, as the collective can use malware to spread across networks and use infected devices to launch further attacks.

Furthermore, users should install official updates on mobile devices whenever new updates roll out. In 2019, millions of Android users were targeted by malware through a fake Samsung app.

Lastly, use secure passwords for all your online accounts, be wary of public WiFi sources; and remember to enable two-factor authentication.

Also read – Fake news latest: You will not contract coronavirus if you are dehydrated