Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Coronavirus (COVID-19) is being used in email Spam attacks, Malware and other Scams

    • Updated:
    • 19 Mar 2020
    • Product/Version:
    • Apex Central All
    • Apex One
    • Apex One (Mac)
    • Apex One as a Service
    • ARM For Interscan Web Security
    • Cisco CSC Security Services Module
    • Cisco CSC Security Services Module
    • Cisco Protectlink
    • Cloud App Encryption For Office 365
    • Cloud Edge
    • Cloud One - Application Security
    • Control Manager
    • Control Manager As A Service
    • Core Protection Module - ESP
    • Core Protection Module For MAC All
    • Damage Cleanup Services
    • Data Loss Prevention Endpoint
    • Data Loss Prevention Endpoint All
    • Data Loss Prevention Network Monitor
    • Deep Discovery Advisor
    • Deep Discovery Analyzer
    • Deep Discovery App for Splunk All
    • Deep Discovery Director All
    • Deep Discovery Email Inspector
    • Deep Discovery Inspector
    • Deep Discovery Web Inspector
    • Deep Edge
    • Deep Security
    • Deep Security API
    • Deep Security As A Service
    • Deep Security AWS Marketplace AMI
    • Deep Security Azure Marketplace
    • Deep Security For Web Apps
    • Deep Security Smart Check
    • Email Encryption Gateway
    • Email Encryption Hosted
    • Email Reputation Services
    • EMSP-SP White Label All
    • Encryption for Email
    • Endpoint Application Control All
    • Endpoint Encryption
    • Endpoint Encryption - Data Armor
    • Endpoint Encryption - Key Armor
    • Endpoint Security Platform All
    • Generic Product
    • Highly Scalable Anti-Spam Solution
    • Hosted Email Security All
    • Hosted Mobile Security All
    • Housecall
    • Housecall Hosted Edition All
    • Information Center
    • Instant Messaging Security All
    • Interscan Antivirus For Sendmail
    • Interscan Gateway Security Appliance All
    • Interscan Messaging Security Appliance All
    • InterScan Messaging Security Suite
    • Interscan Messaging Security Virtual Appliance
    • Interscan Viruswall Standard Edition
    • Interscan Web Manager
    • Interscan Web Manager Lite
    • Interscan Web Security as a Service - Hybrid
    • Interscan Web Security Hybrid
    • Interscan Web Security Suite All
    • Interscan Web Security Virtual Appliance
    • InterScan WebManager SCC
    • Interscan Webprotect All
    • Intrusion Defense Firewall
    • Licensing Management Platform All
    • Machine Learning Assessment Tool
    • Managed Detection & Response
    • Messaging Archiver All
    • Mobile Security For Android
    • Mobile Security For Android All
    • Mobile Security For Enterprise All
    • Mobile Security For Ios All
    • Network Viruswall All
    • OfficeScan All
    • Officescan Plug-In - Data Protection
    • Officescan Plug-In - Endpoint Encryption
    • OfficeScan Plug-in - VDI
    • Policy Manager
    • Portable Security
    • Portalprotect
    • Power Management All
    • Remote Manager All
    • Safe Lock All
    • Safe Mobile Workforce All
    • Safesync For Enterprise All
    • Safesync For XSP All
    • ScanMail for Exchange
    • Scanmail for IBM Domino
    • SDN Adaptor For Nec
    • Securecloud As A Service All
    • Securecloud On-Premise All
    • Security for Mac
    • Security For NAS All
    • ServerProtect All
    • ServerProtect For EMC Celerra
    • ServerProtect For Linux
    • ServerProtect for Network Appliance Filer All
    • ServerProtect For Storage All
    • Smart Protection Complete All
    • Smart Protection For Endpoints All
    • Smart Protection Server All
    • SSL All
    • SSL All
    • Storage Security For Eternus DX Series All
    • Threat Discovery Appliance All
    • Threat Intelligence Manager All
    • Threat Investigation Center All
    • Threat Management Agent All
    • Threat Management Service Portal
    • Threat Mitigator
    • TippingPoint 1500SSL
    • TippingPoint Accessories
    • Tippingpoint Advanced Threat Protection Analyzer
    • Tippingpoint Advanced Threat Protection for Email
    • TippingPoint Advanced Threat Protection for Networks
    • TippingPoint CoreController
    • TippingPoint Digital Vaccine
    • TippingPoint Network Protection (AWS)
    • TippingPoint SMS
    • TippingPoint Splunk App
    • TippingPoint Threat Management Center
    • TippingPoint ThreatDV
    • TippingPoint TPS
    • TippingPoint TX-Series
    • TippingPoint Virtual SMS
    • TippingPoint Virtual TPS
    • Titanium Internet Security For Mac All
    • Titanium Maximum Security
    • Trend Micro Adaptive Security Platform
    • Trend Micro Email Security All
    • Trend Micro Endpoint Sensor
    • Trend Micro IoT Security
    • Trend Micro Mail Scanner for Business
    • Trend Micro Virtual Network Function Suite All
    • Trend Micro Web Security All
    • TXOne - EdgeFire
    • TXOne - EdgeIPS
    • TXOne - ODC
    • USB Security
    • Virtual Desktop Infrastructure
    • Virusbuster Cloud
    • Vsapi Virus Scan Engine
    • Vulnerability Management Services
    • Vulnerability Protection All
    • Web Security For Yamaha Router
    • Worry Free Services for Dell
    • Worry-Free Business Security Advanced
    • Worry-Free Business Security Services All
    • Worry-Free Business Security Standard All
    • Worry-Free Plug-In - Security For MAC All
    • Worry-Free Remote Manager
    • Platform:
    • N/A
Summary

The coronavirus disease (COVID-19) is being used as bait in email spam attacks on targets around the globe. As the number of those afflicted continue to surge by thousands, campaigns that use the disease as a lure likewise increase.

This has been observed by many entities, and also seen a significant spike in the detection of the use of the subject in email spam attacks.

Cronavirus spam email 1

Cronavirus spam email 2

Cronavirus spam email 3

Almost 7,000 unique samples out of 41,000 total Corona Phishing Spam samples reported from Smart Protection Network (SPN) enabled in Trend Micro Messaging products.

Q1 Cronavirus Phishing email

Available Solutions

Solution ModulesSolution AvailablePattern BranchRelease DateDetection/Policy/Rules
Email ProtectionYesAS Pattern 52683-Mar-20Spam
URL ProtectionYesIn the CloudMalware Accomplice
File detection (VSAPI/Smart Scan) and Advanced Threat Scan Engine (ATSE)Yes15.699.0021-Feb-20Backdoor.Win32.REMCOS.USMANEAGFE
15.721.003-Mar-20Trojan.X97M.CVE201711882.THCOCBO
15.691.0017-Feb-20TrojanSpy.Win32.FAREIT.SMTHC.hp
15.695.0019-Feb-20TrojanSpy.Win32.FAREIT.UHBAZCLIZ
15.721.003-Mar-20Trojan.MSIL.AGENTTESLA.THCOCBO
Predictive Learning (TrendX)YesIn the CloudTroj.Win32.TRX.XXPE50FFF034
Downloader.VBA.TRX.XXVBAF01FF006
Details
Public

Recommendations

You may also check the KB article: Submitting suspicious or undetected viruses for file analysis to Technical Support.

For support assistance, please contact Trend Micro Technical Support.

Trend Micro Blogs

Premium
Internal
Partner
Rating:
Category:
Configure; Update
Solution Id:
000247621
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.