Again, impersonating the WHO is a coronavirus scams email campaign with the email subject: “Covid19 Latest Tips to Stay Immune to the Virus!!”
The email claims to have a PDF file signed by a Dr Sarah Hopkins at the WHO called “various diets and tips to keep us safe from being effected with the virus. (Doing a quick look inspection on online there is no media relations representative called Sarah Hopkins)
The victim unintentionally downloads an invasive keylogger called Agent Tesla, that’s able to steal a wide selection of sensitive data.
LastLine, a cybersecurity firm researchers note “Acting as a fully-functional information stealer, [Agent Tesla] is capable of extracting credentials from different browsers, mail, and FTP clients. It logs keys and clipboards data, captures screen and video, and performs form-grabbing (Instagram, Twitter, Gmail, Facebook, etc.) attacks.”