Phish Bowl Alerts
A malicious website pretending to be Johns Hopkins live map of the global spreading of COVID-19 cases is circulating on the web, waiting for unsuspecting viewers of the website (corona-virus-map[dot]com), according to Reason Labs, a cybersecurity company.
They researched the site and reported that "Visiting the website infects the user with the AZORult trojan, an information stealing program which can exfiltrate a variety of sensitive data. It is likely being spread via infected email attachments, malicious online advertisements, and social engineering. Furthermore, anyone searching the internet for a Coronavirus map could unwittingly navigate to this malicious website.”
During this time of heightened anxiety, please take extra care when searching for information. Visit well-known and/or authenticated sites, such as the actual Johns Hopkins University map (https://coronavirus.jhu.edu/) or details found on the World Health Organization's (WHO) COVID-19 pages (https://www.who.int/emergencies/diseases/novel-coronavirus-2019).
A friendly reminder to keep both you, and your computer, safe and healthy.
Reference:
Reason Labs. (March 9, 2020). COVID-19, Info Stealer & the Map of Threats – Threat Analysis Report. Reasonsecurity.com.
https://blog.reasonsecurity.com/2020/03/09/covid-19-info-stealer-the-map-of-threats-threat-analysis-report/
Other Resources:
https://krebsonsecurity.com/2020/03/live-coronavirus-map-used-to-spread-malware/
https://www.scmagazine.com/home/security-news/malicious-coronavirus-map-hides-azorult-info-stealing-malware/
https://blog.malwarebytes.com/social-engineering/2020/02/battling-online-coronavirus-scams-with-facts/
