Quote:Cybercriminals have seized on the novel coronavirus as a theme in their attacks, and it turns out that the most sophisticated players on that scene are no exception. According to Google’s Threat Analysis Group (TAG), more than a dozen nation-state-backed APTs are using the COVID-19 pandemic as a cover for their various cyberespionage and malware activities.
 
Separately, FireEye Mandiant this week pinpointed one such effort, aimed at Chinese government agencies.
 
Like their financially motivated brethren, these state-backed threat groups are using the coronavirus pandemic as a theme and a lure for spearphishing and other social-engineering efforts. These campaigns are geared towards convincing victims to download booby-trapped files and click on malicious links that will ultimately unfurl spyware on victims’ machines.

“Our security systems have detected examples ranging from fake solicitations for charities and NGOs, to messages that try to mimic employer communications to employees working from home, to websites posing as official government pages and public health agencies,” said Shane Huntley, TAG researcher, in a posting on Wednesday.