New crypto token claims to “help” COVID-19 victims

Corona Virus crypto tokens sold on the website, claims to provide financial relief to the victims of the pandemic.
Updated on
April 19, 2023
Published on
April 3, 2020
Read MINUTES
5
Subscribe to the latest industry news, threats and resources.
A newly launched website has released a crypto token called “Corona Virus Token.” Similar to other crypto tokens, it claims to be completely decentralized and that there is limited supply of 1 million tokens. The site displays “LET’S HELP THE VICTIMS OF THE CORONAVIRUS AROUND THE WORLD”, in an attempt to cash in on the sympathy for victims of the pandemic. Usually when a new token or crypto coin is introduced, it is listed on popular exchanges such as Coin Market Cap or Coinbase to facilitate trading. However, Corona Virus Token is not listed.

Hosting Details

The website’s registration details:
Fig 1: Registration details of the site
Fig 1: Registration details of the site
It is notable that many other sites are hosted on the same network. And the IP address has been blacklisted multiple times.
Fig 2: The IP address has been reported multiple times
Fig 2: The IP address has been reported multiple times
Given that “Follow” is spelt as “Fallow” on the website, there is reason to believe the threat actors are using a Dvorak layout keyboard, in which the ‘A’ and ‘O’ keys are adjacent to each other.
Fig 3: Misspelling indicates use of Dvorak-layout keyboard
Fig 3: Misspelling indicates use of Dvorak-layout keyboard

Social media presence

The group is advertising the token across social media sites, ranging from Facebook to Discord. This lends the operation an air of legitimacy and increases traffic to the site. Telegram: https://t.me/coronavirus_token_help_victims Discord: https://discord.gg/WPaRThk Instagram: https://instagram.com/coronavirustoken?igshid=gz7fdo91b7pm Facebook: https://www.facebook.com/pg/Coronavirustoken-100473974931167/ Several of the group’s social media posts are in Spanish, and their official social media accounts follow many Spanish speakers, indicating that some, or all of the group members, are Spanish speakers.
Fig 4: The official social media page has Spanish content
Fig 4: The official social media page has Spanish content
 
Fig 5: The official page is following other Spanish speakers
Fig 5: The official page is following other Spanish speakers

Get Global Threat Intelligence on Real Time

Protect your business from cyber threats with real-time global threat intelligence data.. 30-day free and No Commitment Trial.
Schedule a Demo
Real time Threat Intelligence Data
More information and context about Underground Chatter
On-Demand Research Services
Dashboard mockup
Global Threat Intelligence Feed

Protect and proceed with Actionable Intelligence

The Global Cyber Threat Intelligence Feed is an innovative platform that gathers information from various sources to help businesses and organizations stay ahead of potential cyber-attacks. This feed provides real-time updates on cyber threats, including malware, phishing scams, and other forms of cybercrime.
Trusted by 400+ Top organisations