{"id":30168,"date":"2021-05-04T13:38:46","date_gmt":"2021-05-04T13:38:46","guid":{"rendered":"https:\/\/dinnews.in\/?p=30168"},"modified":"2021-05-04T13:38:49","modified_gmt":"2021-05-04T13:38:49","slug":"fake-covid-19-vaccine-registration-sms-message-in-circulation-aims-to-install-malicious-app","status":"publish","type":"post","link":"https:\/\/dinnews.in\/?p=30168","title":{"rendered":"Fake COVID-19 Vaccine Registration SMS Message in Circulation, Aims to Install Malicious App"},"content":{"rendered":"\n<p>Users are recommended to not pay attention to any such messages or install any third-party apps for COVID-19 vaccine registrations.<\/p>\n\n\n\n<p>A fake SMS message is in circulation that falsely claims to offer an app to let users register for COVID-19 vaccine in India. However, instead of providing a legitimate way to register for the vaccination, the app is aimed at propagating malware via SMS messages once it is installed on a mobile device. The malicious app was initially named COVID-19, though it later received an update that renamed it as Vaccine Register. Attackers may be able to convince users to install the app as a large number of people faced issues while registering for the COVID-19 vaccine through the official CoWIN portal.<\/p>\n\n\n\n<p>Cybersecurity firm ESET&#8217;s malware researcher Lukas Stefanko has\u00a0<a href=\"https:\/\/twitter.com\/LukasStefanko\/status\/1387779219678187526\" target=\"_blank\" rel=\"noreferrer noopener\">tweeted<\/a>\u00a0about the SMS message that asks users to download the app to register for the\u00a0<a href=\"https:\/\/gadgets.ndtv.com\/tags\/covid-19\">COVID-19<\/a>\u00a0vaccination. The message is targeted at Indian users and is designed in a way that impersonates &#8216;COVID-19 vaccine free registration&#8217;, according to the researcher.The researcher said that the SMS message, however, carries a link that installs a worm app, which essentially spreads itself via SMS to victims&#8217; contacts with the link to download the malware. The app also gains unnecessary permissions that attackers could leverage to acquire user data.<\/p>\n\n\n\n<p>Although the app was initially called COVID-19, it was&nbsp;<a href=\"https:\/\/twitter.com\/LukasStefanko\/status\/1387779219678187526\" target=\"_blank\" rel=\"noreferrer noopener\">renamed<\/a>&nbsp;to Vaccine Register and received a light mode to reach even further devices over time. It is also found to have support for dual-SIM connectivity. This will allow the malware to propagate using the first available operator available on the device.<\/p>\n\n\n\n<p>Users are highly recommended to avoid to any SMS messages that contain links asking them to download apps. It is also important to note that registrations for COVID-19 vaccines are currently taking place only through the&nbsp;<a href=\"https:\/\/gadgets.ndtv.com\/tags\/cowin\">CoWIN portal<\/a>&nbsp;as well as the&nbsp;<a href=\"https:\/\/gadgets.ndtv.com\/tags\/aarogya-setu\">Aarogya Setu<\/a>&nbsp;and&nbsp;<a href=\"https:\/\/gadgets.ndtv.com\/tags\/umang-app\">Umang<\/a>&nbsp;apps.<\/p>\n\n\n\n<p>However, there are third-party sites through which you can&nbsp;<a href=\"https:\/\/gadgets.ndtv.com\/internet\/news\/covid-19-vaccination-sites-helping-find-available-slots-nearby-under45-in-getjab-2426922\">receive notifications<\/a>&nbsp;when a slot for the jab is available. The government has also provided the option to&nbsp;<a href=\"https:\/\/gadgets.ndtv.com\/apps\/news\/whatsapp-mygov-corona-helpdesk-chatbot-find-covid-19-vaccination-centre-nearby-step-by-step-guide-2427064\">find your nearby COVID-19 vaccination centre<\/a>&nbsp;using the&nbsp;<a href=\"https:\/\/gadgets.ndtv.com\/tags\/mygov-corona-helpdesk\">MyGov Corona Helpdesk<\/a>&nbsp;chatbot.<\/p>\n\n","protected":false},"excerpt":{"rendered":"<p>Users are recommended to not pay attention to any such messages or install any third-party apps for COVID-19 vaccine registrations. A fake SMS message is in circulation that falsely claims to offer an app to let users register for COVID-19 vaccine in India. However, instead of providing a legitimate way to register for the vaccination, the app is aimed at propagating malware via SMS messages once it is installed on a mobile device. The malicious app was initially named COVID-19, though it later received an update that renamed it as&hellip;<\/p>\n","protected":false},"author":1,"featured_media":30169,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[26,4],"tags":[],"_links":{"self":[{"href":"https:\/\/dinnews.in\/index.php?rest_route=\/wp\/v2\/posts\/30168"}],"collection":[{"href":"https:\/\/dinnews.in\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dinnews.in\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dinnews.in\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dinnews.in\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=30168"}],"version-history":[{"count":1,"href":"https:\/\/dinnews.in\/index.php?rest_route=\/wp\/v2\/posts\/30168\/revisions"}],"predecessor-version":[{"id":30170,"href":"https:\/\/dinnews.in\/index.php?rest_route=\/wp\/v2\/posts\/30168\/revisions\/30170"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dinnews.in\/index.php?rest_route=\/wp\/v2\/media\/30169"}],"wp:attachment":[{"href":"https:\/\/dinnews.in\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=30168"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dinnews.in\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=30168"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dinnews.in\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=30168"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}