Previously, Red Sky Alliance reported on Fancy Bear imposters demanding Bitcoin ransom from a Florida election information website. These actors send various ransom/scam demands using coronavirus-themed domains covidpapers[.]org and coronaxy[.]com. In some cases, they threaten with exposure of allegedly hacked personal files, in other cases, with DDoS attack. They often claim to be Russian government hackers, pretending to be Fancy Bear, Cozy Bear, or Venomous Bear. Their ransom emails typi
