CoronaVirus - Ransomware
A threat actor is pretending to promote legitimate software from WiseCleaner to distribute ransomware labeled as CoronaVirus. The malware uses a fake website and takes advantage of the current COVID-19 pandemic to infect victims. Users who visit the site are also infected with the Kpot Trojan which is capable of stealing passwords from various software applications. The ransomware changes the name of encrypted files instead of the extension and demands 0.008 bitcoins for the decryption key.