Cloud Hosting

According to DomainTools senior security engineer Tarik Saleh, the number of coronavirus-themed domain registrations increased following reports of the first cases of COVID-19, and many of these are allegedly scams.

One particular platform, coronavirusapp[.]site, is prompting users to install an Android application for real-time updates on the pandemic. Instead, the app comes bundled with a ransomware aptly called CovidLock.

CovidLock asks for permission to access the lock screen. It then employs a technique known as screen-lock attack, which holds the phone hostage by blocking user access.

The ransomware threatens to erase contacts, pictures and videos on the infected device, as well as leak the victims social media account information and wipe all phone data unless a ransom of $100 is paid in Bitcoin within 48 hours.

Saleh says phones running on the latest Android versions should be fine if the user set a password to unlock the screen.

Since Android Nougat has rolled out, there is protection in place against this type of attack. However, it only works if you have set a password. If you havent set a password on your phone to unlock the screen, youre still vulnerable to the CovidLock ransomware.

DomainTools researchers say theyve already reverse-engineered the decryption key and plan to share it publicly. They are also monitoring the transactions in the Bitcoin wallet used by the ransomware.

Featured Image: Shutterstock/Immersion Imagery

The rest is here:
Cyber Thieves Using Coronavirus Fears to Steal Bitcoin (BTC) and Cryptocurrency - The Daily Hodl