Cyber warfare

Coronavirus-themed attacks February 1 – March 15, 2020

In this post, I decided to share the details of the Coronavirus-themed attacks launched from February 1 to March 15, 2020.

February 1, 2020 – Crooks start exploiting Coronavirus as bait to spread malware

Security researchers warn of campaigns aimed at spreading malware that exploits media attention on the COVID-19 epidemic.

February 25, 2020 – South Korea suffers from the spread of people infected with Corona 19

‘Est security’ found malicious code disguised as a ‘Corona 19 real-time status’ inquiry program and asked the public’s attention.

February 26, 2020 – New Cyber Attack Campaign Leverages the COVID-19 Infodemic

Researchers from Cybaze Yoroi have spotted a new campaign exploiting the interest in COVID-19 evolution to spread malware.

March 6, 2020 – TrickBot targets Italy using fake WHO Coronavirus emails as bait

Crooks continue to exploit the attention on the COVID-19 outbreak, TrickBot operators target Italian users.

March 8, 2020 – New Coronavirus-themed malspam campaign delivers FormBook Malware

Experts uncovered a new COVID19-themed campaign that is distributing a malware downloader that delivers the FormBook information-stealing Trojan.

March 12, 2020 – Crooks use weaponized coronavirus map to deliver malware

While WHO declares the COVID-19 outbreak a pandemic, crooks are attempting to exploit the situation to monetize their efforts.

March 13, 2020 – State-sponsored hackers are launching Coronavirus-themed attacks

State-sponsored hackers are now using COVID-19 lures to infect their targets.

March 15, 2020 – BlackWater, a malware that uses Cloudflare Workers for C2 Communication

Crooks continue to abuse the interest in Coronavirus outbreak, now experts found a new backdoor called BlackWater that pretends to provide information about COVID-19.

March 15, 2020 – Noooo, now Ancient Tortoise BEC scammers are launching Coronavirus-Themed attacks

A cybercrime gang focused on Business Email Compromise (BEC) has started using COVID19-themed scam emails in its attacks.

[adrotate banner=”9″] [adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, COVID-19)

[adrotate banner=”5″]

[adrotate banner=”13″]

Pierluigi Paganini

Pierluigi Paganini is member of the ENISA (European Union Agency for Network and Information Security) Threat Landscape Stakeholder Group and Cyber G7 Group, he is also a Security Evangelist, Security Analyst and Freelance Writer. Editor-in-Chief at "Cyber Defense Magazine", Pierluigi is a cyber security expert with over 20 years experience in the field, he is Certified Ethical Hacker at EC Council in London. The passion for writing and a strong belief that security is founded on sharing and awareness led Pierluigi to find the security blog "Security Affairs" recently named a Top National Security Resource for US. Pierluigi is a member of the "The Hacker News" team and he is a writer for some major publications in the field such as Cyber War Zone, ICTTF, Infosec Island, Infosec Institute, The Hacker News Magazine and for many other Security magazines. Author of the Books "The Deep Dark Web" and “Digital Virtual Currency and Bitcoin”.

Recent Posts

Experts warn of an ongoing malware campaign targeting WP-Automatic plugin

A critical vulnerability in the WordPress Automatic plugin is being exploited to inject backdoors and…

6 hours ago

Cryptocurrencies and cybercrime: A critical intermingling

As cryptocurrencies have grown in popularity, there has also been growing concern about cybercrime involvement…

8 hours ago

Kaiser Permanente data breach may have impacted 13.4 million patients

Healthcare service provider Kaiser Permanente disclosed a security breach that may impact 13.4 million individuals…

9 hours ago

Over 1,400 CrushFTP internet-facing servers vulnerable to CVE-2024-4040 bug

Over 1,400 CrushFTP internet-facing servers are vulnerable to attacks exploiting recently disclosed CVE-2024-4040 vulnerability. Over…

11 hours ago

Sweden’s liquor supply severely impacted by ransomware attack on logistics company

A ransomware attack on a Swedish logistics company Skanlog severely impacted the country's liquor supply. …

13 hours ago

CISA adds Cisco ASA and FTD and CrushFTP VFS flaws to its Known Exploited Vulnerabilities catalog

CISA adds Cisco ASA and FTD and CrushFTP VFS vulnerabilities to its Known Exploited Vulnerabilities…

24 hours ago

This website uses cookies.