{"id":34169,"date":"2020-04-02T02:32:22","date_gmt":"2020-04-02T02:32:22","guid":{"rendered":"http:\/\/f09b5655-2ad6-4123-8cab-83c5fd824b15"},"modified":"2020-04-02T02:32:22","modified_gmt":"2020-04-02T02:32:22","slug":"theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\/","title":{"rendered":"There&#8217;s now COVID-19 malware that will wipe your PC and rewrite your MBR"},"content":{"rendered":"<p>With the coronavirus (<span class=\"link\"><a href=\"https:\/\/www.cbsnews.com\/live-updates\/coronavirus-disease-covid-19-latest-news-2020-04-01\/\" data-omniture-track=\"moduleClick\" data-omniture-track-data=\"{&quot;moduleInfo&quot;: &quot;link_anchor&quot;, &quot;pageType&quot;: &quot;article&quot;}\" rel=\"noopener noreferrer\" target=\"_blank\" data-component=\"externalLink\">COVID-19<\/a><\/span>) pandemic raging all over the globe, some malware authors have developed malware that destroys infected systems, either by wiping files or rewriting a computer&#8217;s master boot record (MBR).<\/p>\n<p>With help from the infosec community, ZDNet has identified at least five malware strains, some distributed in the wild, while others appear to have been created only as tests or jokes.<\/p>\n<p>The common theme among all four samples is that they use a coronavirus-theme and they&#8217;re geared towards destruction, rather than financial gain.<\/p>\n<p>MBR-rewriting malware<\/p>\n<p>Of the four malware samples found by security researchers this past month, the most advanced were the two samples that rewrote MBR sectors.<\/p>\n<p>Some advanced technical knowledge was needed to create these strains as tinkering with a master boot record is no easy feat and could easily result in systems that didn&#8217;t boot at all.<\/p>\n<p>The first of the MBR-rewriters was <a href=\"https:\/\/twitter.com\/malwrhunterteam\/status\/1242189645552783360\" target=\"_blank\" rel=\"noopener noreferrer\" data-component=\"externalLink\">discovered<\/a> by a security researcher that goes by the name of MalwareHunterTeam, and detailed <a href=\"https:\/\/securitynews.sonicwall.com\/xmlpost\/coronavirus-trojan-overwriting-the-mbr\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">in a report from SonicWall<\/a> this week. Using the name of COVID-19.exe, this malware infects a computer and has two infection stages.<\/p>\n<section class=\"sharethrough-top\" data-component=\"medusaContentRecommendation\" data-medusa-content-recommendation-options=\"{&quot;promo&quot;:&quot;promo_zd_recommendation_sharethrough_top_in_article_desktop&quot;,&quot;spot&quot;:&quot;dfp-in-article&quot;}\">\n<\/section>\n<p>In the first phase, it just shows an annoying window that users can&#8217;t close because the malware has also disabled the Windows Task Manager.<\/p>\n<p><span class=\"img aspect-set\"><img decoding=\"async\" src=\"https:\/\/zdnet2.cbsistatic.com\/hub\/i\/r\/2020\/04\/02\/305b656b-d1b6-444e-a5f8-04677c740e79\/resize\/370xauto\/53d27d4d2086c0e196c740cd32a2289f\/coronaimage.png\" class alt=\"coronaimage.png\" height=\"auto\" width=\"370\"><\/span> <span class=\"credit\">Image: SonicWall<\/span><\/p>\n<p>While users attempt to deal with this window, the malware is silently rewriting the computer&#8217;s master boot record behind their back. It then restarts the PC, and the new MBR kicks in, blocking users into a pre-boot screen.<\/p>\n<p>Users can eventually regain access to their computers, but they&#8217;ll need special apps that can be used to recover and rebuild the MBR to a working state.<\/p>\n<p><span class=\"img aspect-set\"><img decoding=\"async\" src=\"https:\/\/www.zdnet.com\/article\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\/\" class=\"lazy\" alt=\"mbr-msg.png\" data-original=\" https:\/\/zdnet3.cbsistatic.com\/hub\/i\/2020\/04\/02\/51cf9c44-d68d-4d73-beda-2a948edb371b\/mbr-msg.png\"><\/span><noscript><\/p>\n<p><span class=\"img aspect-set\"><img decoding=\"async\" src=\"https:\/\/zdnet3.cbsistatic.com\/hub\/i\/2020\/04\/02\/51cf9c44-d68d-4d73-beda-2a948edb371b\/mbr-msg.png\" class alt=\"mbr-msg.png\"><\/span><\/p>\n<p><\/noscript> <span class=\"credit\">Image: SonicWall<\/span><\/p>\n<p>But there was a second coronavirus-themed malware strain that re-wrote the MBR. This one is a far more convoluted malware operation.<\/p>\n<p>It posed as the &#8220;CoronaVirus ransomware&#8221; but it was only a facade. The malware&#8217;s primary function was to steal passwords from an infected host and then mimic ransomware to trick the user and mask its real purpose.<\/p>\n<p>However, it wasn&#8217;t ransomware either. It only posed as one. Once the data-stealing operations ended, the malware entered into a phase where it rewrote the MBR, and blocked users into a pre-boot message, preventing access to their PCs. With users seeing ransom notes and then not being able to access their PCs, the last thing users would thing to do is to check if someone exfiltrated passwords from their apps.<\/p>\n<p><span class=\"img aspect-set\"><img decoding=\"async\" src=\"https:\/\/www.zdnet.com\/article\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\/\" class=\"lazy\" alt=\"coronavirus-rw.png\" data-original=\" https:\/\/zdnet3.cbsistatic.com\/hub\/i\/2020\/04\/02\/d9833418-4c68-4841-98cd-57865762c3ce\/coronavirus-rw.png\"><\/span><noscript><\/p>\n<p><span class=\"img aspect-set\"><img decoding=\"async\" src=\"https:\/\/zdnet3.cbsistatic.com\/hub\/i\/2020\/04\/02\/d9833418-4c68-4841-98cd-57865762c3ce\/coronavirus-rw.png\" class alt=\"coronavirus-rw.png\"><\/span><\/p>\n<p><\/noscript> <span class=\"credit\">Image: Bleeping Computer<\/span><\/p>\n<p>According to analysis from SentinelOne security researcher <a href=\"https:\/\/twitter.com\/VK_Intel\/status\/1238148671373541377\" target=\"_blank\" rel=\"noopener noreferrer\" data-component=\"externalLink\">Vitali Kremez<\/a> and <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/new-coronavirus-ransomware-acts-as-cover-for-kpot-infostealer\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">Bleeping Computer<\/a>, the malware also contained code to wipe files on the user&#8217;s systems, but this didn&#8217;t appear to be active in the version they analyzed.<\/p>\n<p>Furthermore, this one was also spotted twice, with a second version discovered by G DATA malware researcher <a href=\"https:\/\/twitter.com\/struppigel\/status\/1243190994645983232\" target=\"_blank\" rel=\"noopener noreferrer\" data-component=\"externalLink\">Karsten Hahn<\/a>, two weeks later. This time, the malware kept the MBR-rewriting capabilities but replaced the data wiping feature with a functional screen-locker.<\/p>\n<h3>Data wipers<\/h3>\n<p>But security researchers have spotted more than coronavirus-themed MBR-rewriters. They also spotted two data wipers.<\/p>\n<p>Both were discovered by MalwareHunterTeam.<\/p>\n<p><a href=\"https:\/\/twitter.com\/malwrhunterteam\/status\/1227204126016200704\" target=\"_blank\" rel=\"noopener noreferrer\" data-component=\"externalLink\">The first<\/a> was spotted back in February. It used a Chinese file name, and most likely targeted Chinese users, although we don&#8217;t have information if it was distributed in the wild or was just a test.<\/p>\n<p><a href=\"https:\/\/twitter.com\/malwrhunterteam\/status\/1245386335298433027\" target=\"_blank\" rel=\"noopener noreferrer\" data-component=\"externalLink\">The second<\/a> was spotted yesterday, and this one was found uploaded on the VirusTotal portal by someone located in Italy.<\/p>\n<p>MalwareHunterTeam described both strains as &#8220;poor wipers&#8221; because of the inefficient, error-prone, and time-consuming methods they used to erase files on infected systems. However, they worked, which made them dangerous if ever spread in the wild.<\/p>\n<div class=\"twitterContainer\" readability=\"6.8666666666667\">\n<blockquote class=\"twitter-tweet\" readability=\"7.725\">\n<p lang=\"en\" dir=\"ltr\">&#8220;alcuni accorgimenti da prendere per il Covid-19\\.zip&#8221; -&gt; &#8220;Covid-19.exe&#8221; (60e9dfe954acf0b02a5b35f367cf36ae2bc9b12e02aa3085495c5d8c4c94611c) -&gt; dropped &#8220;Covid-19.bat&#8221;, which is a poor wiper&#8230;<br \/>Seen from Italy.<br \/>Not sure it worse if it was created as joke or seriously.<a href=\"https:\/\/twitter.com\/JAMESWT_MHT?ref_src=twsrc%5Etfw\" rel=\"noopener noreferrer\" target=\"_blank\" data-component=\"externalLink\">@JAMESWT_MHT<\/a> <a href=\"https:\/\/t.co\/YkbFTq8LP7\" rel=\"noopener noreferrer nofollow\" target=\"_blank\" data-component=\"externalLink\">pic.twitter.com\/YkbFTq8LP7<\/a><\/p>\n<p>\u2014 MalwareHunterTeam (@malwrhunterteam) <a href=\"https:\/\/twitter.com\/malwrhunterteam\/status\/1245386335298433027?ref_src=twsrc%5Etfw\" rel=\"noopener noreferrer\" target=\"_blank\" data-component=\"externalLink\">April 1, 2020<\/a><\/p><\/blockquote>\n<\/div>\n<p>It might seem weird that some malware authors create destructive malware like this, but it&#8217;s not the first time that this happened. For every financially-motivated malware strain that security researchers discover, there&#8217;s also one that was created as a joke, just for the giggles. Something similar happened during the WannaCry ransomware outbreak in 2017, when days after the original WannaCry ransomware encrypted computers all over the world, there were countless of clones doing the same thing for no apparent reason.<\/p>\n<div class=\"relatedContent alignNone\">\n<h3 class=\"heading\"><span class=\"int\">Coronavirus Updates<\/span><\/h3>\n<\/div>\n<p>READ MORE <a href=\"https:\/\/www.zdnet.com\/article\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\/#ftag=RSSbaffb68\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Security researchers have discovered coronavirus-themed malware created to destroy users&#8217; computers.<br \/>\nREAD MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":34170,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-34169","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-zdnet-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>There&#039;s now COVID-19 malware that will wipe your PC and rewrite your MBR 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"There&#039;s now COVID-19 malware that will wipe your PC and rewrite your MBR 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-04-02T02:32:22+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/04\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr.png\" \/>\n\t<meta property=\"og:image:width\" content=\"370\" \/>\n\t<meta property=\"og:image:height\" content=\"297\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"There&#8217;s now COVID-19 malware that will wipe your PC and rewrite your MBR\",\"datePublished\":\"2020-04-02T02:32:22+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\\\/\"},\"wordCount\":775,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr.png\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\\\/\",\"name\":\"There's now COVID-19 malware that will wipe your PC and rewrite your MBR 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr.png\",\"datePublished\":\"2020-04-02T02:32:22+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr.png\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr.png\",\"width\":370,\"height\":297},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"There&#8217;s now COVID-19 malware that will wipe your PC and rewrite your MBR\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"There's now COVID-19 malware that will wipe your PC and rewrite your MBR 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\/","og_locale":"en_US","og_type":"article","og_title":"There's now COVID-19 malware that will wipe your PC and rewrite your MBR 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-04-02T02:32:22+00:00","og_image":[{"width":370,"height":297,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/04\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr.png","type":"image\/png"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"There&#8217;s now COVID-19 malware that will wipe your PC and rewrite your MBR","datePublished":"2020-04-02T02:32:22+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\/"},"wordCount":775,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/04\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr.png","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\/","url":"https:\/\/www.threatshub.org\/blog\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\/","name":"There's now COVID-19 malware that will wipe your PC and rewrite your MBR 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/04\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr.png","datePublished":"2020-04-02T02:32:22+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/04\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr.png","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/04\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr.png","width":370,"height":297},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/theres-now-covid-19-malware-that-will-wipe-your-pc-and-rewrite-your-mbr\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"There&#8217;s now COVID-19 malware that will wipe your PC and rewrite your MBR"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/34169","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=34169"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/34169\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/34170"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=34169"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=34169"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=34169"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}