Hackers have recently taken advantage of the outbreak situation to steal information from Internet users. Using a malware called AZORult, hackers have been attacking users who are interested in maps that show the spread of COVID-19.
First detected by MalwareHunterTeam and then analyzed by cybersecurity researcher Shai Alfasi, this malware that has been around for quite a few years and its main purpose is to collect information kept in web browsers such as user IDs, passwords, cryptocurrency keys and more.
Image credit: The Hacker News
This malware attack comes in the form of an app, so when users download the app to “gain information regarding COVID-19”, they’re actually getting their information stolen. When users click on the Corona-virus-Map.com.exe file, multiple duplicates of this file and other files like Corona.exe, Bin.exe, Build.exe and Windows. Globalization.Fontgroups.exe will be created. Once executed, the malware will attempt to connect several URLs and create different network communication activities to collect users’ information.
This is a rather dangerous malware too; you won’t need to input any personal information for the malware to steal them — they can automatically do so via all the information you’ve previously saved on your web browsers. If you’re one of the unlucky ones who got tricked into downloading the app, then the best way if for you to download the right antivirus or malware protection software to combat this threat.
