# MA-779.032020: MyCERT Advisory - COVID-19 Cyber Scams and Campaigns

**Date:** 18 Mar 2020  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-779.032020  
**Advisory ID:** MA-779.032020

---

**1.0 Introduction**
Recently, a pandemic that is the Coronavirus Disease (Covid-19) has affected us globally. MyCERT has observed that there are multiple malicious campaigns taking advantage of this situation by spreading malware through emails with malicious attachments and links to phishing websites 
**2.0 Impact**
The impact of this campaign could give access to threat actors for credential theft, information stealing and malware distributor/infection.
**3.0 Recommendations**
We recommend that all Malaysian citizen adheres to the best practices of internet usage such as below:
1. Always verify any information received from emails, text messages and social media posts about COVID-19.
2. Do not share personal or financial information in an email and do not respond to email solicitations for confidential information.
3. Do not simply click on links provided to you 
4. Use trusted sources such as legitimate, government websites for up-to-date, fact-based information about COVID-19.
Generally, MyCERT advises the IT devices used be updated with the latest security announcements by the vendor and follow best practice security policies to decide updates that would be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: cyber999[at]cybersecurity.my
Phone: 1-300-88-2999 (monitored during business hours)
Fax: +603 - 8008 7000 (Office Hours)
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS: CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours: Mon - Fri 09:00 -18:00 MYT
Web: <https://www.mycert.org.my>
Twitter: <https://twitter.com/mycert>
Facebook: <https://www.facebook.com/mycert.org.my>
**5.0    References**
1. https://www.us-cert.gov/ncas/current-activity/2020/03/06/defending-against-covid-19-cyber-scams
2. https://research.checkpoint.com/2020/vicious-panda-the-covid-campaign/
3. https://threatpost.com/coronavirus-themed-cyberattacks-persists/153493/
4. https://blog.reasonsecurity.com/2020/03/09/covid-19-info-stealer-the-map-of-threats-threat-analysis-report/
5. https://www.bleepingcomputer.com/news/security/new-coronavirus-ransomware-acts-as-cover-for-kpot-infostealer/
6. https://krebsonsecurity.com/2020/03/coronavirus-widens-the-money-mule-pool/