{"id":20567,"date":"2020-04-06T13:40:54","date_gmt":"2020-04-06T17:40:54","guid":{"rendered":"https:\/\/www.psafe.com\/en\/blog\/?p=20567"},"modified":"2022-04-27T14:52:12","modified_gmt":"2022-04-27T18:52:12","slug":"coronavirus-remain-on-high-alert-for-scams-disinformation","status":"publish","type":"post","link":"https:\/\/www.psafe.com\/en\/blog\/coronavirus-remain-on-high-alert-for-scams-disinformation\/","title":{"rendered":"Coronavirus: Remain On High Alert For Scams &#038; Disinformation"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">As we\u2019ve crossed into the month of April, the count of patients infected with coronavirus continues to grow at a sobering pace, and shows no signs of slowing anytime soon. At the same time, people are trying to adjust to the \u201cnew normal\u201d of sustained social distancing.\u00a0\u00a0<\/span><\/p>\n<p><b>A Perfect Storm For Scams and Disinformation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The behavioral and psychological changes required to make social distancing work are significant: everything from sharing a home or apartment for an entire day (and with more people, especially if you have kids), to figuring out how to go to the grocery store and shop safely.\u00a0 The combination of emotional, physical, and psychological stressors, combined with significantly increased internet and email \u201cscreen-time\u201d for most people, has created a kind of perfect storm for online scams, con-artists, and disinformation. Another powerful factor driving this storm is curiosity: people are extremely hungry to hear news, and hopeful \/ practical news in particular.\u00a0 Scammers have stepped into make the most of these factors, and as Emilio Simoni, Research Director at the dfndr Lab explains: \u201cWhat we\u2019re seeing is cybercriminals redoubling their efforts to create more, increasingly sophisticated scams, in order to reap profit from baseless, sensational ads or news \u2014 or through thefts of personal and financial data. The information they offer is almost invariably false, and sometimes the information itself is immediately dangerous to victims who act on it.\u201d<\/span><\/p>\n<p><b>No Slowing Down: Scammers Are Busier Than Ever!<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The pace and inventiveness of coronavirus scams appears to be picking up. Emilio Simoni and the dfndr Lab Security Team have gathered the following examples together. Note that these items by no means constitute a complete list of scams in operation.\u00a0 We share these with you so you can get a richer sense of the variety of these scams, and the methods they employ.<\/span><\/p>\n<p><a href=\"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2020\/04\/nike-usa.net_Galaxy-S5.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-20575 aligncenter\" src=\"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2020\/04\/nike-usa.net_Galaxy-S5-169x300.png\" alt=\"\" width=\"169\" height=\"300\" srcset=\"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2020\/04\/nike-usa.net_Galaxy-S5-169x300.png 169w, https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2020\/04\/nike-usa.net_Galaxy-S5-768x1365.png 768w, https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2020\/04\/nike-usa.net_Galaxy-S5-576x1024.png 576w, https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2020\/04\/nike-usa.net_Galaxy-S5.png 1080w\" sizes=\"auto, (max-width: 169px) 100vw, 169px\" \/><\/a><a href=\"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2020\/04\/Screenshot_20200327-210218_Chrome.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-20573\" src=\"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2020\/04\/Screenshot_20200327-210218_Chrome-174x300.jpg\" alt=\"\" width=\"174\" height=\"300\" srcset=\"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2020\/04\/Screenshot_20200327-210218_Chrome-174x300.jpg 174w, https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2020\/04\/Screenshot_20200327-210218_Chrome-768x1327.jpg 768w, https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2020\/04\/Screenshot_20200327-210218_Chrome-593x1024.jpg 593w, https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2020\/04\/Screenshot_20200327-210218_Chrome.jpg 1074w\" sizes=\"auto, (max-width: 174px) 100vw, 174px\" \/><\/a><a href=\"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2020\/04\/Screenshot_20200327-210239_Chrome.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-20572\" src=\"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2020\/04\/Screenshot_20200327-210239_Chrome-171x300.jpg\" alt=\"\" width=\"171\" height=\"300\" srcset=\"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2020\/04\/Screenshot_20200327-210239_Chrome-171x300.jpg 171w, https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2020\/04\/Screenshot_20200327-210239_Chrome-768x1346.jpg 768w, https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2020\/04\/Screenshot_20200327-210239_Chrome-584x1024.jpg 584w, https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2020\/04\/Screenshot_20200327-210239_Chrome.jpg 1074w\" sizes=\"auto, (max-width: 171px) 100vw, 171px\" \/><\/a><\/p>\n<p><span style=\"font-weight: 400;\">A multilingual scam using the <\/span><b>Nike<\/b><span style=\"font-weight: 400;\"> brand name was discovered by the dfndr Lab Security Team (see image above). The scammers used geolocation to adapt the language used to the victims: it showed messages in Portuguese, English, or Spanish, depending on the visitor\u2019s locale. Some generic questions were used to draw people in, and after they were drawn in they were automatically redirected to another domain, full of ads. It was through impressions of these ads that the cybercriminals reaped their profits.<\/span><\/p>\n<p><a href=\"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2020\/04\/netflix-scam-corona-dfndr.png\"><img loading=\"lazy\" decoding=\"async\" class=\"size-medium wp-image-20574 aligncenter\" src=\"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2020\/04\/netflix-scam-corona-dfndr-245x300.png\" alt=\"\" width=\"245\" height=\"300\" srcset=\"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2020\/04\/netflix-scam-corona-dfndr-245x300.png 245w, https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2020\/04\/netflix-scam-corona-dfndr-768x942.png 768w, https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2020\/04\/netflix-scam-corona-dfndr-835x1024.png 835w, https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2020\/04\/netflix-scam-corona-dfndr.png 1078w\" sizes=\"auto, (max-width: 245px) 100vw, 245px\" \/><\/a><\/p>\n<p><span style=\"font-weight: 400;\">Emilio also notes that \u201cCyberattacks are becoming more and more sophisticated. One of the most popular scams leveraging the pandemic is the one that <\/span><b>falsely promoted a free 1-year subscription for Netflix. <\/b><span style=\"font-weight: 400;\">The cybercriminals study how official companies and websites offer promotions and sales, then mimic their approach, which can help to create a extremely convincing page.\u201d You can see the example Emilio cites, immediately above.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The dfndr Lab Security Team has also discovered <\/span><b>cyberattacks connected to fake profiles on Facebook, also known as bots.<\/b><span style=\"font-weight: 400;\"> These bots are especially prevalent in Facebook Private Groups. Of 3 bots discovered and analyzed by the dfndr Lab, one had engaged more than 10k interactions. These bots used intelligent techniques to persuade the victims, \u201ctalking\u201d through pre-recorded messages that request personal information. The most common themes used by these bots to attract new victims were 1) registration to receive the government social security benefits,\u00a0 and 2) offering a map to check the coronavirus spread around the world. The dfndr Lab also notes that many scams in the US are being disseminated through Facebook Messenger. So be careful!<\/span><\/p>\n<p><b>Paypal phishing attacks have also grown exponentially<\/b><span style=\"font-weight: 400;\"> since the beginning of the pandemic. Dfndr lab stipulates that during the month of March, scam emails fraudulently claiming to be from PayPal, and seeking private information, reached over 1.4k users in the US alone.\u00a0<\/span><\/p>\n<p><b>With people all over the world sheltering in place,<\/b><span style=\"font-weight: 400;\"> virtual meeting providers<\/span><b> Zoom, <\/b><span style=\"font-weight: 400;\">has been in high demand. The dfndr Lab detected 4 fake domains<\/span> <span style=\"font-weight: 400;\">using their name. The URLs were hiding trojans that could act in different ways: seeming to install the Zoom app, but redirecting victims to another website full of ads, and rapidly consuming your phone battery.<\/span><\/p>\n<p><b>What Can You Do?<\/b><\/p>\n<p><span style=\"font-weight: 400;\">This is a story that will continue to move fast, so the examples above will be joined by new and different examples by time you read this. As Emilio Simoni pointed out, hackers all over the world are in HIGH PRODUCTION mode during this crisis. They\u2019re going to keep inventing new and more devious ways to get information, and steal from you.\u00a0\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">You need to protect yourself. So make sure you\u2019re using a security solution that\u2019s built to alert you immediately when you access a scam site, or interact with a known digital virus \u201ccarrier.\u201d dfndr Security has an excellent Anti-Hacking feature you can activate.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If you upgrade to the <\/span><a href=\"psafe:\/\/launch\/subscription_plans\"><b>dfndr Pro<\/b><\/a><span style=\"font-weight: 400;\"> version, you\u2019ll get the added benefit of a <\/span><b>Safe App Installer<\/b><span style=\"font-weight: 400;\"> (which warns you if an app you\u2019re about to install may be a vector for malware). It also offers <\/span><b>Identity Theft Protection<\/b><span style=\"font-weight: 400;\"> to keep your email safe as well.\u00a0<\/span><\/p>\n<p><b>Consider Going Pro<\/b><\/p>\n<p><span style=\"font-weight: 400;\">One of the best ways to protect yourself right now is to upgrade your dfndr app (if you haven\u2019t already) to <a href=\"psafe:\/\/launch\/subscription_plans\">dfndr Pro<\/a>.\u00a0 Pro gives you these added protections:<\/span><\/p>\n<p><b>Unlimited Identity Theft Reports: <\/b><span style=\"font-weight: 400;\">You can check if any of your account credentials have been leaked on the internet.<\/span><\/p>\n<p><b>Anti-theft protection: <\/b><span style=\"font-weight: 400;\">In case of theft or loss, you can lock down your device remotely, find the phone on a map; or, activate a loud alarm to find it nearby. You can also get a picture of the thief, and wipe the phone of your personal data.<\/span><\/p>\n<p><b>Safe App Installer:<\/b><span style=\"font-weight: 400;\"> You\u2019ll know if an app has previously had data breaches before installing.<\/span><\/p>\n<p><b>App Privacy Scan:<\/b><span style=\"font-weight: 400;\"> You can locate on a map where your app data is going and how it might be used by third-parties.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Ads free version: Totally ad-free<\/span><\/p>\n<p><b>Use <a href=\"psafe:\/\/launch\/subscription_plans\">this link<\/a> to learn more about <a href=\"psafe:\/\/launch\/subscription_plans\">dfndr Pro<\/a>, and consider upgrading.\u00a0<\/b><\/p>\n<p><a href=\"psafe:\/\/launch\/direct_purchase?sku=com.psafe.msuite.pro_12mo_29.88\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-20373 size-medium\" src=\"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2019\/07\/GetProSecurity-300x56.png\" alt=\"\" width=\"300\" height=\"56\" srcset=\"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2019\/07\/GetProSecurity-300x56.png 300w, https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2019\/07\/GetProSecurity.png 354w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p><b>Everyday Digital Hygiene Matters Now Too\u00a0<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Just as avoiding coronavirus requires that you keep your hands clean (and keep them away from you face!) \u2014 digital hygiene is achieved through simple steps as well. Now\u2019s a time to make doubly sure that you:<\/span><\/p>\n<ul>\n<li><b>NEVER click on links sent to you from unknown people.\u00a0<\/b><\/li>\n<li style=\"font-weight: 400;\"><b>Look very closely at emails: <\/b><span style=\"font-weight: 400;\">If the source looks or sounds like someone you know but the name or email address seems even slightly off\u2026stay away! Leveraging contact and friend information is one of the most common paths for scammers to load malware or get your private information.<\/span><\/li>\n<li style=\"font-weight: 400;\"><b>Only download or install software from <\/b><b><i>trusted<\/i><\/b><b> sources.<\/b><span style=\"font-weight: 400;\"> Make sure you double check url&#8217;s! The Anti-Hacking feature on <\/span><b>dfndr<\/b><span style=\"font-weight: 400;\"> will protect you from malware and known hacking sites.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\"><b>Use reliable sources, such as legitimate government websites,<\/b><span style=\"font-weight: 400;\"> to get real, fact-checked stories and information on COVID-19. Be aware that scammers will be pulling at you emotionally. This is a hard time for everyone, but do everything you can to stay cool and grounded: your ability to \u201ccount to three\u201d before clicking or responding to a link or headline is more important now than ever.<\/span><\/li>\n<\/ul>\n<p><b>We\u2019re going to keep working to keep you informed<\/b><b> and up to date.\u00a0 Until next time, we hope you and yours can stay safe and stay well!\u00a0<\/b><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Find out how cyberattackers have been using coronavirus as a scam and how to protect your device.<\/p>\n","protected":false},"author":83,"featured_media":20569,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_crdt_document":"","footnotes":""},"categories":[4451,5],"tags":[3709,12248,12041,149,1475],"class_list":["post-20567","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-dfndr-company-news","category-security","tag-cyberattack","tag-dfndr-lab","tag-dfndr-security","tag-phishing","tag-scam"],"_links":{"self":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts\/20567","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/users\/83"}],"replies":[{"embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/comments?post=20567"}],"version-history":[{"count":11,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts\/20567\/revisions"}],"predecessor-version":[{"id":20613,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts\/20567\/revisions\/20613"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/media\/20569"}],"wp:attachment":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/media?parent=20567"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/categories?post=20567"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/tags?post=20567"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}