Malware Download – Coronavirus Phishing Scams

RE: Your XXX Shipment

Found and analysed by Kaspersky Seen since end March ‘Sender’ – Delivery firm Threat type – Malware download – Bsymem Trojan Keywords: RE: Your XXX Shipment AWB:3357647591, the shipment was delay because of the World Coronavirus disease (COVID-19), Descrciption: Enclose

Cargo Arrival Notice!!

Found and analysed by Kaspersky Seen since mid April ‘Sender’ – Delivery firm Threat type – Malware download – Noon Keywords: Cargo Arrival Notice!!, arrival notice, express, urgent_your shipm ent arrived on 30th, however the details providedfor dispatch are incom plete, prior to Coronavirus pandemic precautionary major

Tracking Delivery exception

Found and analysed by Kaspersky Seen since mid April ‘Sender’ – Delivery firm Threat type – Malware – Remcos backdoor Keywords: Tracking Delivery exception, shipping document, your parcel arrived at the post office on 1st April 2020 due to the covid-19, please confirm the Document

Order Arrival Notification

Found and analysed by Kaspersky Seen since late April ‘Sender’ – Delivery firm Threat type – Malware – Remcos backdoor Keywords: Order Arrival Notification, your package has arrived, sales order number, your package has reached the warehouse and due to coronavirus outbreak, you will need to come to our warehouse

Urgent Information Letter

Found and analysed by Group-IB Seen since late April Threat type – Malicious download – Spyware ‘Sender’ – WHO Key words: Urgent Information Letter: First human Covid-19 Vaccine Test/ Result Update, Download all attachment for vaccine update (in .iso file) download all attachment for vaccine update, Tarik Jasarevic

Biomed covid-19 kits RFQ

Found and analysed by Group-IB Seen since late April Threat type – Malicious download – Loki PWS ‘Sender’ – Admin@biomed.com Key words: Biomed covid-19 kits RFQ, we would appreciate if you could kindly send us the best prices, test for COVID-19, Kim Anh Nguyen, Luong Bang Str, Vung Tau City.

UNICEF COVID-19 TIPS

Found and analysed by Group-IB Seen since late March Threat type – malicious download – spyware ‘Sender’ – Unicef Key words: UNICEF COVID-19 TIPS APP, find attached presentation & APP, kindly download and install on your system for dearly update and guideline on how to protect your self, Jennifer Deheer

Covid-19 Emergency Funds Update

Found and analysed by Sonic Wall Seen since late March ‘Sender’ – IRS Threat type – Credential stealer, malware download Keywords: Covid-19 Emergency Funds Update, You are entitled to emergency funds aid package, kindly check the attached file

CovidLock Android Ransomware

Submitted by Nokia Threat Intelligence Lab Seen since late March Threat type – malware download – CovidLock ransomware – fake app ‘Sender’ – Various Key words: United States coronavirus tracker, infection map download, mobile app.

RE: nCoV: Coronavirus outbreak

Found and analysed by VMware Carbon Black Seen since early March Threat type – malicious software download ‘Sender’ – info@arakaturk.live Key words: RE: nCoV: Coronavirus outbreak and safety measures in your city (urgent), CDC health alert, we are obliged to provide different ways, avoid potential hazards.