Reports of the hacks began on March 18, and have since skyrocketed over the past week, with victims from the U.S., Germany and France mostly targeted. Cybercriminals are hijacking routers and changing DNS IP addresses in order to redirect victims to attacker controlled sites promoting fake coronavirus information apps. If victims download these apps, they are infected with information-stealing Oski malware. Researchers believe that the number of victims is likely to grow in the coming weeks, especially if attackers have set up other repositories, whether hosted on Bitbucket or other code repository hosting services.
Source: https://threatpost.com/hackers-hijack-routers-to-spread-malware-via-coronavirus-apps/154170/