As cybercriminals become more and more creative in how they target and gain access to a system, researchers are noticing more coronavirus-related threats. Within the past few weeks, hackers have begun to hijack routers in order to change system settings and redirect victims to a fake app that promotes coronavirus awareness. If a victim downloads the app, cybercriminals release a harvesting malware to steal personal and financial information.
Researchers discovered that hackers are utilizing a new threat vector to target victims in order to infect them with a new info-stealing malware. Cybercriminals are able to hijack routers (mostly Linksys routers) by brute force or man-in-the-browser attacks. And once in, they change the Domain Name System (DNS) settings to redirect victims unknowingly to a fake IP address; the user has no idea their system has been hijacked.
RELATED: Growth of Coronavirus Themed Cyberattacks
As a victim inputs an authentic website name (such as Amazon.com or Disney.com) into the address bar, he/she is instead sent to a hacker-controlled, coronavirus-related app to download. The domain name in the address bar remains unchanged, making the fake page look legitimate. If the app is downloaded, the user’s computer becomes infected with Oski malware, which emerged late 2019 and is known to steal:
Oski made an impact in North America and China last year, and within a few days of its use through hijacked routers, the U.S., Germany, and France reported 1,193 victims. Researchers expect more within the coming weeks. The initial payload for the cybercriminals seems to be the downloader itself, but the information stolen by Oski can be used to steal money, for identity theft, and even spear phishing.
And, to stop a hijacking from happening to you:
Finally, be attentive to all incoming email related to the COVID-19 pandemic—malware also occurs with just a few clicks of a malicious email.
SEE RELATED: HIPAA Compliant email: The Definitive Guide
We all have concerns about the pandemic and want to stay on top of the news, but it's important to be vigilant to stop from becoming a victim of cybercriminals.