Malware being delivered by mail, warns Swiss cyber agency

Switzerland’s Federal Workplace for Cybersecurity (OFCS) issued a warning on Wednesday about “pretend letters” from the nation’s meteorological company getting used to unfold malware.

The postal letters, dated to 12 November, declare to offer folks within the nation a brand new climate app developed by the company — MeteoSwiss — nonetheless they comprise a QR code redirecting folks to a malicious utility developed by fraudsters.

In response to OFCS, “by scanning the QR code within the letter, the telephone consumer downloads malware often known as ‘Coper’ and ‘Octo2’. When putting in the pretend app, this system makes an attempt to steal delicate knowledge corresponding to login particulars for greater than 383 cell apps, together with e-banking apps.”

The usage of real-world lures to contaminate folks with malware is uncommon because of the extra overheads that bodily operations contain in comparison with on-line hacking.

Whereas the usage of the postal service to ship commodity malware is uncommon, it isn’t exceptional. Microsoft beforehand confirmed that criminals have posted counterfeit packages designed to look like its Workplace merchandise as a way to defraud folks.

QR codes have been utilized in on-line phishing campaigns, and fraudulent codes have been used within the real-world — as an illustration posted over official ones on parking ticket machines in the UK to redirect drivers to fraudulent web sites.

The OFCS didn’t reveal what number of people are believed to have been impacted by the fraudulent letters. It mentioned the pretend app imperfectly mimicked the actual “Alertswiss” app developed by the nation’s Workplace for Civil Safety.

Solely Android telephones had been affected. People who’ve put in the pretend app had been inspired to manufacturing unit reset their gadgets.

“Have you ever acquired such a letter? Please don’t hesitate to ship it to us electronically utilizing our reporting type. On this approach, you’ll assist the OFCS to take acceptable measures. Then destroy the letter. Now we have already began to implement protecting measures,” said the company.

Study extra.