Cyber Risks · Krebs on Security

Live Coronavirus Map Used to Spread Malware

Summary: A member of several Russian-language cybercrime forums began selling a $200 to $700 digital Coronavirus infection kit that wraps a Java-based malware loader around the Johns Hopkins University interactive Coronavirus map, which the seller says draws real-time data from the World Health Organization and other sources. Security experts also began warning of new malicious Web sites using interactive versions of the same map to distract visitors while attempting to install the password-stealing AZORult malware.

Key Takeaway: The seller claims the map and exploit work even on fully patched versions of Java, and that the payload can be bundled into a filename most Webmail providers allow - so the lure arrives looking like accurate, real-time pandemic data rather than a suspicious attachment.

Read the original at Krebs on Security ↗

Topics
Malware
Related