"Corona antivirus" infects victims with malware

Cybercriminals continue to leverage the ongoing coronavirus outbreak for their own gain by launching numerous scam campaigns which use Covid-19 as a lure to trick users into installing a variety of malware and data stealers.

In the latest scam, discovered by Malwarebytes, cybercriminals have set up a website advertising “Corona Antivirus - World's best protection” which tries to trick users into installing antivirus software that supposedly has the capabilities to protect users from becoming infected with the virus in real life. The creators of the site have even provided more details on how their solution works, saying:

“Our scientists from Harvard University have been working on a special AI development to combat the virus using a windows app. Your PC actively protects you against the Coronaviruses (Cov) while the app is running.”

While most users will likely understand that there is no way for any type of software to protect them from becoming infected with the coronavirus, there is a possibility that some will fall for this scheme as the cybercriminals behind it have taken the necessary steps to make their website appear legitimate.

BlackNET RAT

Once a user installs the application available on the Corona Antivirus site, their computer will be infected with malware. The installation file, which contains the commercial packer Themida, will turn a user's PC into a bot ready to receive commands.

After inspecting the command and control server, Malwarebytes discovered a control panel for the BlackNET botnet. The full source code for the BlackNET toolkit was published on GitHub a month ago and some of its features include deploying DDoS attacks, taking screenshots, stealing Firefox cookies, stealing saved passwords, implementing a keylogger, executing scripts and stealing Bitcoin wallets, among others.

While working from home, it is important that all users keep their computers up to date and exercise caution when downloading and installing new programs to avoid falling victim to the many coronavirus-themed scams that are currently making their way around the web.

After investigating the Corona Antivirus site, Malwarebytes informed CloudFlare of its discovery and the CDN took immediate action to flag the website as a malicious.

  • Stay protected online with our top picks for the best antivirus software

http://www.techradar.com/news/corona-antivirus-infects-victims-with-malware

Source: TechRadar - All the latest technology news

By: Anthony Spadafora

Oracle is the right place for cloud to meet all the demands of enterprises
Oracle is the right place for cloud to meet all th ...
Spotify vs Tidal: which music streaming service is best for you?
Spotify vs Tidal: which music streaming service is ...
PS5 design still eludes players after Sony’s live stream
PS5 design still eludes players after Sonys liv ...
Claim up to £400 cashback on any Samsung Soundbar or 2nd Samsung TV when you buy selected 55’’ or larger QLED 4K TVs
Claim up to 400 cashback on any Samsung Soundbar ...
The Half-Life games are free on Steam for the next two months
The Half-Life games are free on Steam for the next ...
The new documentary ‘Spacedrop’ takes viewers inside a simulated space quarantine
The new documentary Spacedrop takes viewers ...