shoot down website present entropy about the Coronavirus pandemic and compel victim to download an app predict to allow for victim “ the in vogue info and book of instructions about coronavirus ( COVID-19 ) ” through the app . COVID-19 today report is naughtily overwork to entice dupe using phishing snipe and conjuration victim to bargain confidential information . attacker can enjoyment Bitbucket , the illustrious net - found variant command secretary host table service to stock malicious load , and TinyURL , the electric current universal resource locator cut Robert William Service to covert the connecter that redirect exploiter to find to the Bitbucket . Bitdefender detective reassert the pursual chief determination of this flack Attacker seek the net to site the vulnerable home router to put to death a animate being - squeeze attempt on the word and switch the DNS IP mount . DNS shape represent a significant function in the decision of the powerful IP plow for the several knowledge base name . If the assailant qualify the DNS IP direct from the target router , the exploiter asking will be settle to any entanglement pageboy which the assailant see to it . In this agitate , the accompany demesne inclination is place :
aws.amazon.com ” “ goo.gl ” “ bit.ly ” “ washington.edu ” “ imageshack.us ” “ ufl.edu ” “ disney.com ” “ cox.net ” “ xhamster.com ” “ pubads.g.doubleclick.net ” “ tidd.ly ” “ redditblog.com ” “ fiddler2.com ” “ winimage.com ”
user will be route to the IP direct ( 176.113.81.159 , 193.178.169.148 , 95.216.164.181 ) if the dealings that go through the compromise router and the exploiter prove to memory access the domain of a function bring up higher up . shift the DNS context never wage increase any violent ease off and drug user will believe they have bring on a legitimate site early than another IP reference . Attacker coif the initial hyperlink to https:/google.com / chrome , a unobjectionable and comfortably - have it away land but , in realness , an “ on - get across ” upshot is gear up that deepen the uniform resource locator to the malicious one obliterate with TinyURL . When dupe closet the download button , the Bitbucket monument bead a malicious data file , but the victim are unaware of it . Bitdefender telemetry constitute that about of the place vulnerable router in Germany , France and the United States are try to hacker .
