Page 1 of 3

COVID-19 scam and malware sites

Posted: Sun Mar 15, 2020 6:44 pm
by Dr-Flay
Can everyone please keep an eye out for sites taking advantage of the current world crisis, and rate them as soon as possible.

Here is one reported distributing android ransomware
https://www.mywot.com/en/scorecard/coronavirusapp.site
Source.
www.scmagazine.com /home/security-news/news-archive/coronavirus/coronavirus-tracking-app-locks-up-android-phones-for-ransom/

Re: COVID-19 scam and malware sites

Posted: Thu Mar 19, 2020 7:02 pm
by nova7
https://bgp.he.net/dns/coronavirusapp.site#_ipinfo (Offline, right now).

www.virustotal.com/gui/url/3991201a7c28 ... /detection

Re: COVID-19 scam and malware sites

Posted: Fri Mar 20, 2020 7:42 pm
by spectre
buygoods.com
pandemicprotect.net/preventionquiz2
pandemic-survival.org

Image

Re: COVID-19 scam and malware sites

Posted: Mon Mar 23, 2020 5:59 pm
by spectre
Fake websites created in the last 2 days, offering face masks, hand sanitiser, loo roll.
Registered to a virtual office.

protected.city/shop
protectedcity.com

Re: COVID-19 scam and malware sites

Posted: Thu Mar 26, 2020 1:40 am
by Site-rater
Counterfeit COVID-19 tests:
cov19kits.com
Hosted by Shopify, which is in turm reverse proxied by Cloudflare.
Taken down by GoDaddy.

Re: COVID-19 scam and malware sites

Posted: Sat Mar 28, 2020 1:36 pm
by spectre
Received in Spam - 'Help Protect Your Family From The Coronavirus'

Image

newimmunitysupport.com/dailyupdate_blend/
enlightenedoil.com/immunity

Re: COVID-19 scam and malware sites

Posted: Sun Mar 29, 2020 6:38 pm
by Site-rater
bluesoleil has gone rogue too.

Re: COVID-19 scam and malware sites

Posted: Thu Apr 02, 2020 8:55 pm
by NotBuyingIt
Spam email, transmitted via IP 67.159.232.202 on the LUCN LLC network, proclaims: "Face Mask Finally Available in [your country] | Could Help Against Deadly Virus Outbreak. "

The email contains suspicious links to a Lithuanian website at hxxp://mustangforest.com/ci0=...
The email contains spying web beacons linked to hxxp://mustangforest.com/aS0=

Re: COVID-19 scam and malware sites

Posted: Mon Apr 06, 2020 12:38 pm
by spectre
Received in spam with false sender address - info@1and1.de:
The best protection against viruses and air pollution

shopsafemask.com created February 2020

Owner - abraham.yela@gmail.com / ecomerzpro.net

Re: COVID-19 scam and malware sites

Posted: Thu Apr 09, 2020 1:19 pm
by spectre
Spam received from infobuyer.store
IP - 178.238.229.145

getsafemask.com