I would like to share something new : Phishing Campaign related to this crazy Chinese virus as folowing;

From: IS&T Notifications
Sent: Wednesday, March 18, 2020 3:23 PM
To: IS&T Notifications <itservices@mfa.gwu.edu>
Subject: *HIGH SECURITY ALERT: Active Known Phishing Campaign
Importance: High

IS&T SECURITY NOTIFICATION

What:           *HIGH SECURITY ALERT: Active Known Phishing Campaign

When:          Effective Wednesday, March 18, 2020 at 1:00 PM EDT

Impact:        All Staff

Malicious cyber actors are known to take advantage of public concern of major events, including COVID-19, by conducting phishing attacks and disinformation campaigns. Phishing attacks often use prevalent channels (including emails, text, links on social media and bogus websites) to trick victims into action or revealing sensitive information.  As a precaution, MFA implemented an email banner to help users identify emails that originate from an outside organization.  We also encourage all staff to use MFA email addresses, Jabber or Tigertext only for work related communications.  All staff members are advised to safeguard sensitive information by taking the following precautions:

ACTIVE KNOWN PHISHING CAMPAIGN:

A malicious website masquerading as a live map for Coronavirus COVID-19 Global Cases by Johns Hopkins University is circulating on the Internet to entice unwitting users to visit.  Visiting the website infects the user with the AZORult trojan, an information stealing program which can exfiltrate a variety of sensitive data.  *DO NOT VISIT the website “corona-virus-map[dot]com”.

What users should start doing now:

• Avoid clicking on links in unsolicited emails and be wary of email attachments.

• Do not reveal personal or financial information in emails, and do not respond to email solicitations for this information.
• If you are using a home computer, verify that you installed an anti-malware software with the latest updates and signature.  While MFA does not endorse any of the following vendors or program, these software are available free for home use: Avast, Bitdefender, Avira etc.

• Recognize and report phishing emails to securityassistance@mfa.gwu.edu
• Review the Federal Trade Commission’s blog post on coronavirus scams https://www.consumer.ftc.gov/blog/2020/02/coronavirus-scammers-follow-headlines for information on avoiding COVID-19 related scams.
• Use trusted sources—such as legitimate, government websites—for up-to-date, fact-based information about COVID-19.

Questions/Concerns:

If you believe you are being phished, please report the incident to MFA Security to SecurityTeam@mfa.gwu.edu or contact the Security Hotline at 202-795-2793.

So, some bastard takes advantage on others' misery!

Human nature!?

BB Lee