In reality, the fraudulent app is the information-stealing malware called Oksi.
Most internet providers today provide routers that have a decent strength default security setup.
For those who have downloaded and installed the COVID-19 app, perform a malware scan immediately on your box.

(AP PHOTO/MIKE FIALA)
Most importantly, verify to use a unique password at every site while resetting your passwords.

source: www.techworm.net