Online Threat Alerts (OTA) - Alerting you to scams and frauds.

Wish-you Co Scam, Virus, New Year, Christmas Greeting Malicious Website
Wish-you Co Scam, Virus, New Year, Christmas Greeting Malicious Website

The website, Wish-you.co, is malicious and is being used by cybercriminals to steal account credentials by sending malicious messages with links to itself or other malicious websites to potential victims. The malicious messages display Christmas and New Year greetings via various messengers.

Below is a list of malicious websites used by cybercriminals to steal account information:

  • hxxps://wish-you.co
  • hxxps://wish4u.co
  • hxxps://my-msg.co
  • hxxps://look-me.co
  • hxxps://surprise4u.me
  • hxxps://hookgist.com
  • hxxps://see-magic.co
  • hxxps://mera-style.com
  • hxxps://whatsapp-style.co
  • hxxps://see-magic.co
  • hxxps://my-love.co

Online users are asked not to visit the websites that display a "Merry Christmas" or "Happy New Year 2020" message. After displaying the holiday greeting, visitors to the websites are asked to enter personal information. And, while the visitors are on the websites, a malicious programming script is executed that searches for access credentials. If it is able to find or gain access to the visitors' social media accounts, it will send a message to the visitors' user contacts with a link back to one of the malicious websites.

If social media users complain that they are receiving strange or suspicious messages from you, change your social media account passwords and scan your computer with the antivirus or anti-malware software installed on it.

11

Comment sectionComments / Answers (11)

Remove sensitive information from your post. Your IP address will be used to display your estimated location.

Comment count 11

by an anonymous user from: Clonshagh, Dublin, Ireland

Warning

Opened a message from wish-you.co that came in on a WhatsApp contact/friends number. How the feck can they do that?

Turns out I'd 'Subscribed' to 'MobioAstro' Horoscope/Tarot Card Company...Premium messages!! Looks like it's cost me about 20 quid so could be worse but they're still rotten, stinking B*stards.

Wouldn't we like to get our hands on these Toss Pots

Mick, Ireland

Delete


by an anonymous user from: Winnipeg, Manitoba, Canada

I opened the message multiple times but the only thing it asked of me was my name and nothing else personal, there doesn’t seem to be anything wrong with my device so far, should I be worried?

Delete


by info

Just scan your computer with the antivirus software on it.

Delete


by an anonymous user from: London, England, United Kingdom

So how do we know what spam and what's not, please?

Delete


by info

There no simple solution, just be careful of unpopular websites that ask you for personal and financial information, other sensitive information.

Delete



by an anonymous user from: Covina, California, United States

I used the share to link from this page and on twitter it posted the malicious link right in the text. Click able and in blue. I'm going to delete the post and check the notice I sent out on Facebook for the same malicious link.

Delete


by an anonymous user from: Quezon City, National Capital Region, Philippines

I accidently opened a link which is my love. How to delete the program they installed because sometimes I've noticed that after sending a message to my friends something is showing up on my tuping board on my phone

Delete


by info

Check your phone for unwanted and strange apps and remove them. Then, change your passwords.

Delete


by an anonymous user from: London, England, United Kingdom

I received 3 of these yesterday. I wrote a status on Facebook warning my friends not to open anything from Wush-you.co.
Today my post was removed by Facebook and they're saying that it's spam?!

Delete


by an anonymous user from: Chalandri, Attiki, Greece

Facebook did the same to me, removing my post. I asked them to review it sending them what a search by Google finds about "wish-you.co" virus. After several hours they cancelled their first decision and now my post is visible to public.

Delete


by an anonymous user from: Mandaluyong, National Capital Region, Philippines

Because you opened it, and hackers used it to scatter spam.

Delete


waiting