Hackers using fake COVID-19 app to implant infostealer malware

[Bttzed03]

They're smart and always follow the trend. That's how they usually trick users into downloading infected apps and steal information and money from them. The trick this time is posing information about COVID-19 and then forces users to download the app with the promise of getting the latest information/updates. Their objective is to compromise the home routers and change the DNS settings to implant the infostealer called "Osk".

Attacker set the initial hyperlink to https://google.com/chrome which is a clean and well-known domain, but actually, an “on-click” event is set that changes the URL to the malicious one which is hidden with TinyURL.

Once victims click the download button, a malicious file drop from the Bitbucket repository but the victims completely unaware of it.

“In the final stage of the attack, a malicious file packed with MPRESS is downloaded. This payload is the Oski stealer that communicates with a C&C server for uploading the stolen information.”

There are plenty of information about COVID-19 on the internet and you also have your television/social media. There is no need to download some apps just to track what's happening about the pandemic.

 

[hd49728]

I don't say them are smart. Scammers are always stupid, if not they are not scammers. there are many ways to get income and if they are smart, they can earn income by their own works, not scam ones.

Only victicms of scammers are more stupid than scammers, and get scammed by them. Victims, how many of them get scammed the first time? How many of them get scammed many times, by the same scam methods? There are not statistics or researches on that but I doubt that victims learn lessons from their losses and avoid their second scammed accidents.

[Lucius]

I don't say them are smart. Scammers are always stupid, if not they are not scammers. there are many ways to get income and if they are smart, they can earn income by their own works, not scam ones.

That's your opinion, but I wouldn't agree that all scammers are stupid, it would be nice if that was the case. Your assumption that scammers are stupid because they cannot earn income from normal work has nothing to do with the fact that it is much easier to cheat others than to work honestly. This is especially pronounced in the case of cryptocurrencies, where you can make a fortune in a very easy and simple way.

If we remember Electrum exploit which is trick so many users to download fake wallet (still live today for any version under 3.3.4) I would not call it a stupid, but brilliantly executed attack that resulted in thousands of stolen BTC.

I would not call victims stupid in the literal sense of the word, but insufficiently educated and naive with a certain dose of impatience to make some profit as soon as possible. Scammers know it and are adjusting to the current moment, which is now completely in the sign of a virus, soon it can be in the sign of halving, or some future BTC fork.


Regarding that malware, I advise people to check for info online and to not download any app for COVID-19, apart from the real virus, you will probably also get one for your device.

All general info about virus : https://www.worldometers.info/coronavirus/

[cryptoaddictchie]

Only victims of scammers are more stupid than scammers, and get scammed by them.

That's harsh for a statement, based on topic they are just finding a source of statistic and update regarding Corona Virus, though we should be reminded of potential risk on major apps on our mobile which most of them just likely to scam or take advantage of users.

I would not call victims stupid in the literal sense of the word, but insufficiently educated and naive with a certain dose of impatience to make some profit as soon as possible.

All general info about virus : https://www.worldometers.info/coronavirus/

This is acceptable and more convincing. People just really dont know when to push through with their hands, just to earn profits.

In addition to that site.

This is a good reference of update for corona. Travel announcement aside from the stats were updated per country which can help us warn if we are going to travel somewhere overseas.

Source:
https://www.coronatracker.com

[JeromeTash]

Hackers are now using the COVID-19 crisis to trick unsuspecting people into downloading malware in form of coronavirus tracking apps. Just a few days ago i saw news of CovidLock on AndroidAuthority, A new Android ransomware that was posing as a coronavirus tracking app but on downloading it to the phone would force victims to pay $100 in Bitcoin within 48 hours in order to regain access to the phone.

[asu]

Hackers are now using the COVID-19 crisis to trick unsuspecting people into downloading malware in form of coronavirus tracking apps. Just a few days ago i saw news of CovidLock on AndroidAuthority, A new Android ransomware that was posing as a coronavirus tracking app but on downloading it to the phone would force victims to pay $100 in Bitcoin within 48 hours in order to regain access to the phone.

I guess only those Android phones that has the version of 6.0 or Marshmallow can be exploit by this malware. Those who are 7.0 or Nougat android phones doesn't affect or does have protection against this so-called malware.

People just need to be careful clicking about any links or downloading that are coronavirus related.

[skarais]

I don't say them are smart. Scammers are always stupid, if not they are not scammers. there are many ways to get income and if they are smart, they can earn income by their own works, not scam ones.

They are not stupid, mate. They are smart enough to take advantage of the opportunities available and they can even take action even though the chances of success are very small. For them (scammers) there is no consideration that his actions are something that can harm others because they only want money and keep trying to find new victims all the time. For them, money can be produced in various ways even from the results of fraud they succeed in committing and this is a misleading ideology.

Victims are people who have had the bad luck of the efforts made by scammers, when someone has a concern about this then reminding one another is the most recommended and I thank the OP for sharing this information with the crypto community and I think your findings are worthy of appreciation.

[hd49728]

They are not stupid, mate.

From all aspects, to conclude they are stupid when they are scammers.

They are smart enough to take advantage of the opportunities available and they can even take action even though the chances of success are very small. For them (scammers) there is no consideration that his actions are something that can harm others because they only want money and keep trying to find new victims all the time. For them, money can be produced in various ways even from the results of fraud they succeed in committing and this is a misleading ideology.

Scammers can earn money from their scam 'efforts' but how they can safe what they earn from scam? Easy comes, easy goes. It is true for all, and scammers are not exception. When they easily earn money from scam, they will easily spend those earnings for stupid things. Some days later, they won't be able to earn a single cent and what kinda of endings waiting for them. Not good.

You can see from many football stars or athletics who ends their lives without money in pockets, despite of in their all time highs, they manage to earn millions of dolllars.

Victims are people who have had the bad luck of the efforts made by scammers, when someone has a concern about this then reminding one another is the most recommended and I thank the OP for sharing this information with the crypto community and I think your findings are worthy of appreciation.

Victims, if they are scammed the first time, we can sympathize with them but if they get scammed from time to time, please let me say they deserve what they lost. They lost not because they don't know risks and methods of scammers, they are only greedy and want to take risks with scammers.

[joniboini]

Scammers can earn money from their scam 'efforts' but how they can safe what they earn from scam? Easy comes, easy goes. It is true for all, and scammers are not exception. When they easily earn money from scam, they will easily spend those earnings for stupid things. Some days later, they won't be able to earn a single cent and what kinda of endings waiting for them. Not good.

Still, it's not a reason you can call them stupid. Anyway, we are talking about malware here and not simple phone call scams. You definitely can't hijack DNS settings if you're 'stupid'.