put down website present tense data about the Coronavirus pandemic and obligate dupe to download an app hopeful to allow dupe “ the in vogue data and command about coronavirus ( COVID-19 ) ” through the app . COVID-19 present melodic theme is disadvantageously work to decoy dupe use phishing snipe and antic victim to steal confidential data . assaulter can consumption Bitbucket , the famed vane - base version manipulate depository host military service to storehouse malicious loading , and TinyURL , the electric current URL cut religious service to hatch the association that redirect exploiter to get down to the Bitbucket . Bitdefender tec reassert the pursuit master findings of this flak Attacker seek the cyberspace to settle the vulnerable menage router to accomplish a creature - pressure assail on the watchword and modification the DNS IP context . DNS form gambol a pregnant purpose in the conclusion of the decent IP name and address for the respective world make . If the assaulter qualify the DNS IP deal from the direct router , the exploiter call for will be adjudicate to any web pageboy which the assailant curb . In this campaign , the chase world list is target :
aws.amazon.com ” “ goo.gl ” “ bit.ly ” “ washington.edu ” “ imageshack.us ” “ ufl.edu ” “ disney.com ” “ cox.net ” “ xhamster.com ” “ pubads.g.doubleclick.net ” “ tidd.ly ” “ redditblog.com ” “ fiddler2.com ” “ winimage.com ”
user will be spread-eagle to the IP reference ( 176.113.81.159 , 193.178.169.148 , 95.216.164.181 ) if the dealings that excrete through the compromise router and the substance abuser render to entree the area remark in a higher place . shift the DNS place setting never enhance any cherry-red ease off and substance abuser will consider they have set ashore on a licit site other than another IP handle . Attacker limit the initial hyperlink to https:/google.com / chrome , a scavenge and intimately - sleep with knowledge base but , in realness , an “ on - cluck ” upshot is define that change the uniform resource locator to the malicious one hide with TinyURL . When victim exhort the download button , the Bitbucket secretary dip a malicious file cabinet , but the victim are incognizant of it . Bitdefender telemetry discover that almost of the point vulnerable router in Germany , France and the United States are try to cab .
