COVID-19 scam and malware sites

Dr-Flay · Post by **Dr-Flay** » Sun Mar 15, 2020 6:44 pm

Can everyone please keep an eye out for sites taking advantage of the current world crisis, and rate them as soon as possible.

Here is one reported distributing android ransomware
https://www.mywot.com/en/scorecard/coronavirusapp.site
Source.
www.scmagazine.com /home/security-news/news-archive/coronavirus/coronavirus-tracking-app-locks-up-android-phones-for-ransom/

nova7 · Post by **nova7** » Thu Mar 19, 2020 7:02 pm

https://bgp.he.net/dns/coronavirusapp.site#_ipinfo (Offline, right now).

www.virustotal.com/gui/url/3991201a7c28 ... /detection

spectre · Post by **spectre** » Fri Mar 20, 2020 7:42 pm

buygoods.com
pandemicprotect.net/preventionquiz2
pandemic-survival.org

spectre · Post by **spectre** » Mon Mar 23, 2020 5:59 pm

Fake websites created in the last 2 days, offering face masks, hand sanitiser, loo roll.
Registered to a virtual office.

protected.city/shop
protectedcity.com

Site-rater · Post by **Site-rater** » Thu Mar 26, 2020 1:40 am

Counterfeit COVID-19 tests:
cov19kits.com
Hosted by Shopify, which is in turm reverse proxied by Cloudflare.
Taken down by GoDaddy.

spectre · Post by **spectre** » Sat Mar 28, 2020 1:36 pm

Received in Spam - 'Help Protect Your Family From The Coronavirus'

newimmunitysupport.com/dailyupdate_blend/
enlightenedoil.com/immunity

Site-rater · Post by **Site-rater** » Sun Mar 29, 2020 6:38 pm

bluesoleil has gone rogue too.

NotBuyingIt · Post by **NotBuyingIt** » Thu Apr 02, 2020 8:55 pm

Spam email, transmitted via IP 67.159.232.202 on the LUCN LLC network, proclaims: "Face Mask Finally Available in [your country] | Could Help Against Deadly Virus Outbreak. "

The email contains suspicious links to a Lithuanian website at hxxp://mustangforest.com/ci0=...
The email contains spying web beacons linked to hxxp://mustangforest.com/aS0=

spectre · Post by **spectre** » Mon Apr 06, 2020 12:38 pm

Received in spam with false sender address - info@1and1.de:
The best protection against viruses and air pollution

shopsafemask.com created February 2020

Owner - abraham.yela@gmail.com / ecomerzpro.net

spectre · Post by **spectre** » Thu Apr 09, 2020 1:19 pm

Spam received from infobuyer.store
IP - 178.238.229.145

getsafemask.com

COVID-19 scam and malware sites

COVID-19 scam and malware sites

Re: COVID-19 scam and malware sites

Re: COVID-19 scam and malware sites

Re: COVID-19 scam and malware sites

Re: COVID-19 scam and malware sites

Re: COVID-19 scam and malware sites

Re: COVID-19 scam and malware sites

Re: COVID-19 scam and malware sites

Re: COVID-19 scam and malware sites

Re: COVID-19 scam and malware sites

Who is online