COVID-19 scam and malware sites

Dr-Flay
Posts: 42
Joined: Wed Sep 04, 2013 5:25 am

COVID-19 scam and malware sites

Post by Dr-Flay » Sun Mar 15, 2020 6:44 pm

Can everyone please keep an eye out for sites taking advantage of the current world crisis, and rate them as soon as possible.

Here is one reported distributing android ransomware
https://www.mywot.com/en/scorecard/coronavirusapp.site
Source.
www.scmagazine.com /home/security-news/news-archive/coronavirus/coronavirus-tracking-app-locks-up-android-phones-for-ransom/

nova7
Posts: 507
Joined: Fri Apr 06, 2012 11:32 pm

Re: COVID-19 scam and malware sites

Post by nova7 » Thu Mar 19, 2020 7:02 pm

https://bgp.he.net/dns/coronavirusapp.site#_ipinfo (Offline, right now).

www.virustotal.com/gui/url/3991201a7c28 ... /detection

spectre
Posts: 7921
Joined: Sun May 03, 2009 10:43 pm

Re: COVID-19 scam and malware sites

Post by spectre » Fri Mar 20, 2020 7:42 pm

buygoods.com
pandemicprotect.net/preventionquiz2
pandemic-survival.org

Image

spectre
Posts: 7921
Joined: Sun May 03, 2009 10:43 pm

Re: COVID-19 scam and malware sites

Post by spectre » Mon Mar 23, 2020 5:59 pm

Fake websites created in the last 2 days, offering face masks, hand sanitiser, loo roll.
Registered to a virtual office.

protected.city/shop
protectedcity.com

Site-rater
Posts: 5839
Joined: Tue Sep 15, 2009 7:48 pm

Re: COVID-19 scam and malware sites

Post by Site-rater » Thu Mar 26, 2020 1:40 am

Counterfeit COVID-19 tests:
cov19kits.com
Hosted by Shopify, which is in turm reverse proxied by Cloudflare.
Taken down by GoDaddy.

spectre
Posts: 7921
Joined: Sun May 03, 2009 10:43 pm

Re: COVID-19 scam and malware sites

Post by spectre » Sat Mar 28, 2020 1:36 pm

Received in Spam - 'Help Protect Your Family From The Coronavirus'

Image

newimmunitysupport.com/dailyupdate_blend/
enlightenedoil.com/immunity

Site-rater
Posts: 5839
Joined: Tue Sep 15, 2009 7:48 pm

Re: COVID-19 scam and malware sites

Post by Site-rater » Sun Mar 29, 2020 6:38 pm

bluesoleil has gone rogue too.

NotBuyingIt
Posts: 6548
Joined: Fri Mar 11, 2011 6:21 pm

Re: COVID-19 scam and malware sites

Post by NotBuyingIt » Thu Apr 02, 2020 8:55 pm

Spam email, transmitted via IP 67.159.232.202 on the LUCN LLC network, proclaims: "Face Mask Finally Available in [your country] | Could Help Against Deadly Virus Outbreak. "

The email contains suspicious links to a Lithuanian website at hxxp://mustangforest.com/ci0=...
The email contains spying web beacons linked to hxxp://mustangforest.com/aS0=

spectre
Posts: 7921
Joined: Sun May 03, 2009 10:43 pm

Re: COVID-19 scam and malware sites

Post by spectre » Mon Apr 06, 2020 12:38 pm

Received in spam with false sender address - info@1and1.de:
The best protection against viruses and air pollution

shopsafemask.com created February 2020

Owner - abraham.yela@gmail.com / ecomerzpro.net

spectre
Posts: 7921
Joined: Sun May 03, 2009 10:43 pm

Re: COVID-19 scam and malware sites

Post by spectre » Thu Apr 09, 2020 1:19 pm

Spam received from infobuyer.store
IP - 178.238.229.145

getsafemask.com

Post Reply

Who is online

Users browsing this forum: No registered users and 3 guests