Sender: WHO – Coronavirus Phishing Scams

Urgent Information Letter

Found and analysed by Group-IB Seen since late April Threat type – Malicious download – Spyware ‘Sender’ – WHO Key words: Urgent Information Letter: First human Covid-19 Vaccine Test/ Result Update, Download all attachment for vaccine update (in .iso file) download all attachment for vaccine update, Tarik Jasarevic

Solidarity Response Fund

Found and analysed by Google Seen since early April ‘Sender’ – WHO Threat type – Begging letter Keywords: Solidarity Response Fund Help WHO Fight COVID-19, It’s never been more urgent to support the global response, bitcoin, BTC, accelerate research and development of a vaccine

Covid-19 Emergency Funds Update

Found and analysed by Sonic Wall Seen since late March ‘Sender’ – IRS Threat type – Credential stealer, malware download Keywords: Covid-19 Emergency Funds Update, You are entitled to emergency funds aid package, kindly check the attached file

Covid-19Feed

Found and analysed by RSA Seen since late March Threat type – credential stealer ‘Sender’ – WHO Key words: Covid-19Feed: COVID-19 Emergency update, Stella Chungong, go through the attached document, specialist wuhan-virus-advisory

Emergency Alert: Community Spread

Found and analysed by Cofense Seen since early March ‘Sender’ – WHO Threat type – Credential stealer Keywords: Emergency Alert: Community Spread in Your City, updated Global News document, who.int-covid-19,

World Health Organisation Safety

Found and analysed by Cofense Seen since late March ‘Sender’ – WHO Threat type – Malicious URL Keywords: World Health Organisation Safety Update for REDACTED, go through the attached document on safety measures

Updates COVID-19

Found and analysed by Mimecast Seen since late March Threat type – credential stealing ‘Sender’: ‘Covid-19’/ WHO Key words: a new update on the coronavirus from W.H.O, New update released on 3/24/2020, mandatory for all staff in your organization.

SAFETY COVID-19 (Coronavirus)

Found and analysed by Mimecast Seen since late March Threat type – credential stealing ‘Sender’: WHO Key words: SAFETY COVID-19 (Coronavirus) Awareness Safety Measures, go through the atttached document on safety mesaures, Specialist Wuhan advisory.

COVID-19 Solidarity Response

Found and analysed by KnowBe4 Seen since late March Threat type – begging letter ‘Sender’ – Mack at the WHO Key words: COVID-19 Solidarity Response Fund for WHO, mack, the fund will enable us to, boosting laboratory capacity, strategic preparedness and response plan, August 2020

COVID-19 Solidarity Response

Found and analysed by KnowBe4 Seen since late March Threat type – begging letter ‘Sender’ – COVID-19 Solidarity Response Fund Key words: COVID-19 Solidarity Response Fund for WHO, donate now with Bitcoin payment, your contribution will matter!