Corona, Cyber and Computer Systems
Cybercrime in the wake of the coronavirus

Due to the current restrictions in public life, many companies will have to cease operations in whole or in part. Others are forced to adapt their work processes - whether online consultations, spontaneous mergers into trading platforms or simply switching to home office.

However, when employees are in the home office, it is regularly not possible to meet the usual security requirements. Especially if the company is not sufficiently prepared for a swift transition to working from home.

Crisis situations are regularly preyed upon by cyber criminals. Currently, everything focuses on the corona virus, not only in everyday life, but also in cybercrime.

University Hospital Brno – Ransomware

On Friday 13 March 2020, hackers disrupted the operation of the Brno University Hospital in the Czech Republic. There is also one of the largest laboratories in the country, where tests for the corona virus are currently being evaluated. The entire computer system had to be shut down and surgeries had to be cancelled. It will probably take weeks before hospital operations are fully restored.

The malware was a so-called ransomware. It is infiltrated into the computer system and data is encrypted. A ransom is demanded for the decryption. Ransomware usually occurs in waves and affects several companies simultaneously.

Recent ransomware waves have shown that hackers have gone to greater lengths, spending more time in the network of those affected, infecting larger areas of the IT infrastructure, gathering more information and also demanding higher ransom payments in line with the performance of the blackmailed company. As a result, the hackers regularly cause more serious disruptions to business operations than was the case just a few years ago.

WHO safety measures - Phishing

Phishing regularly attempts to obtain user login data by imitating a trustworthy entity such as a website, corporate identity or e-mail senders and then using this data to loot the user's bank account.

The WHO is currently warning that cyber criminals are posing as WHO in order to obtain sensitive information and account data.

The WHO makes it clear that they

never ask for user names or passwords to access security information,
never sent attachments that were not requested,
never send links for websites outside www.who.int,
never charge costs for an application, conference registration or hotel reservation and
never award prizes or grants, issues certificates or solicits donations by e-mail.

Coronavirus map - Pharming

Pharming is a subtype of phishing. The user is redirected to a fake website which then installs viruses or trojans on the user's computer. The aim is to obtain personal or financial information for identity theft.

Currently, an interactive map of the spread of the corona virus is used as a decoy. The malware is disguised as a "coronavirus map" and is sent by e-mail or downloaded with a link. The map actually shows the coronavirus spread in real time. However, in the meantime, the computer is scanned in the background for passwords, browser history and cookies and keys for crypto currencies, credit card numbers, login data and other sensitive information are stolen.

The real interactive map is available on the official website of Johns Hopkins University.

FFP3 protective masks - Scamming

Scamming is classic fraud. The scams are generally not only common in the area of cyber-crime. Facts are given in order to cheat the victims out of their pockets. A classic example are false promises of love and money, such as those of the "Nigeria Connection" with the now well-known promises of inheritance.

At present, more and more websites are being registered that offer scarce or regularly unavailable goods, such as FFP3 protective masks or coronavirus home tests. Pre-orders are often accepted here. In this way, the planned delivery date is moved into the future and the fraud scheme can be kept running as long as possible until a suspicion arises or more reports of online fraud appear on the net.

Cyber insurance covers risks associated with cyber attacks and data breaches. In addition to crisis support services such as IT services and forensics, it also covers business interruption losses, such as lost profits and ongoing costs.

Corona, Cyber and Computer SystemsCybercrime in the wake of the coronavirus

Corona, Cyber and Computer Systems
Cybercrime in the wake of the coronavirus