COVID-19: Malware, fake news & hoaxes

Cyber Threats During COVID-19: Malware, Phishing, Fake News & Hoaxes

As discussed in previous articles, even in times of crisis — where most people act with responsibility and solidarity — there remains a small group intent on causing harm. These malicious actors are not only taking advantage of laxer security measures and the fact that employees working from home may be easier to deceive, but they are also exploiting the public alarm caused by the coronavirus to trick people.

The damage is not only economic (as in ransomware attacks), but sometimes it is aimed at destabilizing and harming society, such as with fake health apps giving false COVID-19 diagnoses, which pose serious risks.

Malware Campaigns Related to COVID-19

In recent days, numerous malware infection attempts with different objectives have been detected:

• Targeting healthcare personnel:
  • The Spanish National Police warned of a massive email campaign containing a virus designed to damage hospital IT systems.
• Corporate impersonation via email:
  • INCIBE (Spanish National Cybersecurity Institute) reported malware-laden emails impersonating well-known companies.
• Phishing via SMS:
  • Messages offering health masks lead victims to fake websites requesting personal and credit card data, then forward the scam to all the victim’s contacts.
• Ransomware attacks:
  • Examples like CovidLock lure users with COVID-19-related information, infect their devices, lock access, and demand payment for restoration.

Fake News & Hoaxes

Alongside malware, fake news and hoaxes have become powerful tools to destabilize society:

• Fake news:
  • Spread manipulated or false information to influence public opinion or cause panic.
  • Examples include fabricated statements from scientists or governments, often prompting harmful actions like panic buying.
  • Objectives are often political, aiming to destabilize countries, disrupt markets, or damage reputations.
• Hoaxes:
  • False messages often framed as coming from a “friend who’s a doctor” or “an expert recording,” giving dangerous or useless health advice.
  • Example: Local Police in Pinto, Spain warned about a hoax urging people to hoard products for a non-existent state of emergency.

Kymatio Recommendations

1. Do not forward unverified information.
2. Verify news in trusted media: TV, reputable newspapers, or radio.
3. If the information cannot be confirmed — break the chain and warn others.

Conclusion

In the current context, you must remain alert to:

• Phishing (email, WhatsApp, SMS)
• Malware (viruses, ransomware)
• Fake news and hoaxes

By protecting yourself, you protect your organization and society as a whole.

📌 Contact Kymatio to strengthen your organization’s cybersecurity posture.

‍