The Latin American public and institutions are at heightened risk of cyber crime attacks during the coronavirus pandemic.
Online scams, ransomware attacks and phishing email schemes have proliferated in Latin America amid the coronavirus pandemic, exposing the dangers hackers pose to people, banks and governments. If the past is any indication, Latin America is largely unprepared for this new wave of cybercrime.
In Costa Rica, a ransomware app called COVIDLock spread across the country in the second half of March, targeting individuals and companies. COVIDLock relied on the people’s fear of the pandemic, claiming to prevent contagion by providing interactive maps of the virus’ spread. Instead, the application hijacked victims’ devices and demanded a ransom in the cryptocurrency bitcoin. The ransomware even tripped the alarms of one of Costa Rica’s national banks, alerting the security ministry to the cyberthreat.
In Costa Rica, a ransomware app called COVIDLock spread across the country in the second half of March, targeting individuals and companies.
In response Miguel López, Costa Rica’s public prosecutor for cybercrime and fraud, took to the airwaves to warn citizens, predicting the number of malicious campaigns would only rise. His predictions came true in the first week of April, as banking and judicial authorities across Costa Rica reported scams related to unemployment benefits, electronic tax payments and social services, according to CRHoy. Criminals in Puerto Rico, Guatemala and Mexico have also been exploiting fears of the health and economic crises to perpetrate phishing scams aimed at collecting sensitive information that allows them to commit insurance and identity fraud. The emails lure people with promises of government stimulus money, or COVID-19 tests and vaccines. The links that are then clicked solicit personal information or introduce malware.
In Colombia, meanwhile, authorities reported 160 complaints of cyber-fraud during the weekend prior to its official lockdown on March 24, a 60 percent increase compared to the same period in 2019, Cali’s El País reported.
In Mexico, tech experts warned in an interview with El Financiero that as the workforce there transitions to home offices, retail and financial sectors will be among the most targeted.
Latin America has very high internet penetration but seems largely unprepared to counteract cybercrime. This means that, as governments impose stricter quarantine measures to fight back the coronavirus pandemic, individuals, corporations and critical infrastructure are vulnerable to attack. Charity Wright, an analyst with global cyber threats firm IntSights Cyber Intelligence, said that countries with the largest economies — Brazil, Mexico, Colombia and Argentina — are the most likely to be targeted by hackers.
“They have the money, a huge population and are adopting new technology quickly, but at the same time these countries are very much behind the rest of the world in implementing cyber defense mechanisms, regulation and compliance policies across the board,” Wright, who has extensively researched cybercrime in Latin America, predicted a surge in cyber attacks in the next six to twelve weeks, just as the region faces a rapid rise in coronavirus cases. Mexico and Brazil already ranked seventh and eighth for the number of cyberattacks globally, according to a 2018 assessment by Europol.
As quarantines close non-essential businesses, people have begun banking, shopping and accessing government resources online, increasing the number of targets for phishing and malware schemes. Poorer and elderly residents desperate to access emergency benefits are among the most at risk of becoming victims of such attacks.Existing criminal groups may also turn to cybercrime to “replace income lost,” as illicit economies suffer the same disruptions in supply chains and distribution as legal ones, Global Initiative analysts said in a report published last month.
Wright agreed, saying that vendors of cybersecurity products in Mexico found that cartels and underground organized crime groups have collaborated with hackers. “It is not their primary source of income or money laundering yet,” she said, “but they are increasingly adopting new hackers and technologies to hide their money and diversify their financial flows.”
Reported by IC Investigative Unit
To Read More INTELIGENCIA stories like this one, go here.