During these unprecedented times, where social distancing is the required norm, cybercriminals around the world look for ways to capitalize on this crisis. From selling fake COVID-19 cures to phishing scams, criminals have ramped up their attacks. Hospitals, banks, government agencies — no one is immune to their attempts.
Every day, several thousand new suspicious domains are registered using COVID-19-related keywords, as reported by the handlers with the SANS Internet Storm Center. Additionally, malicious attackers are launching DNS-hijacking attacks against D-Link and Linksys routers, redirecting users to malicious sites advertising phony coronavirus apps. If users download the apps, their devices become infected with information-stealing malware. The attackers are using brute-force attacks to obtain routers' admin passwords.
Attacks aren't limited to COVID-19 though. Researchers with FireEye report that Chinese-based threat group APT41 has sharply ramped up its activities after a lull. Between January 20 and March 11 of this year, APT41 launched cyberattacks against more than 75 organizations around the world, exploiting flaws in Citrix NetScaler/ADC, Cisco routers, and Zoho ManageEngine Desktop Central. These are just some of the malicious campaigns that organizations must contend with today.
Let's face it, pandemic or not, evil attackers have proven time and again that they aren't going to stop. Yes: Threats, system compromises, and even vulnerabilities ramp up during times of crises, but they will always be part of the world we live in. Even with travel restrictions and shelter-in-place orders, defenders must continue to build their skill sets. Figuring out where to begin is ..
Support the originator by clicking the read the rest link below.
