Scams for viruses: The special conditions it has caused around the world coronavirus pandemic are being exploited by cybercriminals, as ESET warns.
Global concern, vulnerable groups at high risk, excessive demand for goods that are no longer in stock and misinformation on social media - all of this equates to a huge opportunity for cybercriminals.
ESET researchers collected some of the most common forms of fraud and analyzes them, appealing to it caution users.
Malicious news. Scammers pretend to send important information from reputable agencies, such as P.O.Y. (Fig.1) or from reliable journalistic organizations, such as Wall Street Journal (Fig.2), aiming to trick potential victims into clicking on malicious links. Typically, such links (Scams) can install malware, steal personal information, or attempt to extort login credentials and passwords access.
Exploitation of charity. In this form of scam, cybercriminals try to persuade the victim to help fund a vaccine for children in China. With no vaccine available at the moment, users end up sending bitcoin to scammers' wallets. The technique is effective only in a very small percentage of users, but it acquires a respectable size if one considers that it is done on a global scale.
Masks. In another type of scam, cybercriminals send spam emails (Fig.3) to trick victims into ordering masks that will keep them safe from the coronavirus. In reality, victims end up unwittingly disclosing sensitive personal and financial data. According to Sky News, fraudulent mask sellers ripped off £800.000 ($1 million) from users in United Kingdom, only in February.
ESET advises users to be aware of these and related scams and to be extremely careful by applying the following guidelines:
• Avoid clicking links or downloading spam attachments / texts from unknown or even trusted sources unless you are absolutely certain that the message is genuine.
• Ignore communications that request your personal information. If you deem it necessary to provide them, be sure to check the authenticity of the sender first, using a different medium than the email itself (eg internet search).
• Pay special attention to emails marked "urgent" or "caution" and urging you to take immediate action or offer COVID-19 vaccines or treatments.
Beware of charitable campaigns or crowdfunding campaigns that may be fraudulent.
• Use reliable software with multiple levels of security, which has protection against phishing.
