March 12, 2020 - A malicious website pretending to be the live map for Coronavirus (COVID-19), showing global cases by Johns Hopkins University is circulating on the internet waiting for unwitting internet users to visit the website. Visiting the website infects the user with the AZORult trojan, an information stealing program which can exfiltrate a variety of sensitive data.
It is likely being spread via infected email attachments, malicious online advertisements, and social engineering.
Furthermore, anyone searching the internet for a Coronavirus map could unwittingly navigate to this malicious website.
This website was using the malicious URL - Corona-Virus-Map.com:
The clean URL is:
Additional information is available on the COVID-19 map scam website.
For more information or questions about Information Security, contact CSUCI's Information Security Team at infosec@csuci.edu or visit https://www.csuci.edu/its/security/.
Source:
Reason Labs. (March 9, 2020). COVID-19, Info Stealer & the Map of Threats – Threat Analysis Report. Reasonsecurity.com. Accessed 10 March 2020 at https://blog.reasonsecurity.com/2020/03/09/covid-19-info-stealer-the-map-of-threats-threat-analysis-report/