New crypto token claims to “help” COVID-19 victims

Corona Virus crypto tokens sold on website, claims to provide financial relief to the victims of the pandemic.

Share this Intel:

A newly launched website has released a crypto token called “Corona Virus Token.” Similar to other crypto tokens, it claims to be completely decentralized and that there is limited supply of 1 million tokens. The site displays “LET’S HELP THE VICTIMS OF THE CORONAVIRUS AROUND THE WORLD”, in an attempt to cash in on the sympathy for victims of the pandemic. 

Usually when a new token or crypto coin is introduced, it is listed on popular exchanges such as Coin Market Cap or Coinbase to facilitate trading. However, Corona Virus Token is not listed. 

Hosting Details

The website’s registration details:

Fig 1: Registration details of the site
Fig 1: Registration details of the site

It is notable that many other sites are hosted on the same network. And the IP address has been blacklisted multiple times. 

Fig 2: The IP address has been reported multiple times
Fig 2: The IP address has been reported multiple times

Given that “Follow” is spelt as “Fallow” on the website, there is reason to believe the threat actors are using a Dvorak layout keyboard, in which the ‘A’ and ‘O’ keys are adjacent to each other. 

Fig 3: Misspelling indicates use of Dvorak-layout keyboard
Fig 3: Misspelling indicates use of Dvorak-layout keyboard

Social media presence

The group is advertising the token across social media sites, ranging from Facebook to Discord. This lends the operation an air of legitimacy and increases traffic to the site. 

Telegram: https://t.me/coronavirus_token_help_victims

Discord: https://discord.gg/WPaRThk

Instagram: https://instagram.com/coronavirustoken?igshid=gz7fdo91b7pm

Facebook: https://www.facebook.com/pg/Coronavirustoken-100473974931167/

Several of the group’s social media posts are in Spanish, and their official social media accounts follow many Spanish speakers, indicating that some, or all of the group members, are Spanish speakers. 

Fig 4: The official social media page has Spanish content
Fig 4: The official social media page has Spanish content

 

Fig 5: The official page is following other Spanish speakers
Fig 5: The official page is following other Spanish speakers

Be informed about these Threats in your Inbox

Sign up now to our Threat intelligence Newsletter and be the first to know about these threats first in your inbox.