The newly discovered coronavirus that has swept through China – and killed dozens within days – now has an online equivalent.
Kaspersky detection technologies have found malicious files disguised as documents related to the coronavirus. The files were masked under the guise of pdf, mp4, docx files about the coronavirus.
The names of files imply that they contain video instructions on how to protect yourself from the virus, along with updates on the threat and even virus detection procedures. Of course, the files contain none of these. Instead, they contain a range of threats, from Trojans to worms, which are capable of destroying, blocking, modifying or copying data, as well as interfering with the operation of computers or computer networks.
“The coronavirus, which is being widely discussed as a major news story, has already been used as bait by cybercriminals,” says Anton Ivanov, Kaspersky malware analyst. “So far we have seen only 10 unique files, but as this sort of activity often happens with popular media topics, we expect that this tendency may grow. As people continue to be worried for their health, we may see more and more malware hidden inside fake documents about the coronavirus being spread.”
Kaspersky products have detected coronavirus-related malicious files with the following detection names:
- Worm.VBS.Dinihou.r
- Worm.Python.Agent.c
- UDS:DangerousObject.Multi.Generic
- Trojan.WinLNK.Agent.gg
- Trojan.WinLNK.Agent.ew
- HEUR:Trojan.WinLNK.Agent.gen
- HEUR:Trojan.PDF.Badur.b
To avoid falling victim to malicious programs pretending to be exclusive content, Kaspersky recommends taking the following steps:
- Try to avoid suspicious links that promise exclusive content. Refer to official sources for trustworthy and legitimate information.
- Look at the downloaded file extension. Documents and video files should not have been made either .exe or .lnk formats.
- Use a reliable security solution, such as Kaspersky Security Cloud, for comprehensive protection from a wide range of threats.
