The CovidLock mobile cryptojacking application is masked as a coronavirus infection map.

The CovidLock mobile cryptojacking application is masked as a coronavirus infection map.

   Cryptic scammers have started using the coronavirus pandemic to spread malware under the guise of an infection map.



Previously, computer malware was distributed under the guise of a map to track the epidemic. Now, under the guise of an application tracking new cases of coronavirus infection, attackers are distributing extortion software cryptovalyut for Android.

The company DomainTools reports an increase in the number of domain names mentioning coronavirus. For example, the site coronavirusapp distributes a fraudulent application CovidLock, which blocks the smartphone screen and requires to pay $100 in bitcoins.

According to the creators of the site, their application is allegedly approved by the World Health Organization and the U.S. Center for Disease Control and Prevention. The description says it will monitor for new infections and notify the owner of the application when a coronavirus appears near it.


"If a person near you becomes infected with coronavirus, you will be notified immediately. You can also view the latest information about the epidemic in the area where you are located. Our app works with the World Health Organization and the U.S. Center for Disease Control and Prevention to get the latest information from them", — says the description on the website.

When a user installs an application on their smartphone, they ask for multiple permissions, including screen lock.


DomainTool specialists have thoroughly analyzed the available information and concluded that the distributors of the application have been previously seen in other similar attacks. Fortunately, CovidLock hasn't gained wide popularity and no one has given in to the ransom demand.

The best way to ensure your own security is to avoid dubious domains related to coronavirus, and to install applications on your smartphone only from official Google Play or App Store.

Comments