Security News > 2020 > May > ‘[F]Unicorn’ Ransomware Impersonates Legit COVID-19 Contact-Tracing App

A fresh ransomware strain known as "[F]Unicorn" has emerged, first seen this week targeting users by pretending to be an official government COVID-19 contact tracing app.

According to an advisory from the Computer Emergency Response Team from the Agency for Digital Italy, the malware family is taking advantage of the rollout of "Immuni" - Italy's official coronavirus-tracking app.

The [F]Unicorn sample is spreading as a fake Immuni app housing a malicious executable, purporting to be from the Italian Pharmacist Federation.

" relied on emails informing users of a PC beta release of Immuni, Italy's COVID-19 contact tracing app, for distribution," explained researchers at Tripwire, in a short analysis on Wednesday.

Tripwire researchers noted that the email is invalid, meaning that victims can't contact the operators with a proof of payment.

News URL

https://threatpost.com/funicorn-ransomwarecovid-19-contact-tracing-app/156069/