This Android malware is so dangerous, even Google is worried

Google has confirmed reports of the existence of an extremely potent Android malware (di tabloya nû de vedibe), and notified victims that they’re being targeted.

di blog post (di tabloya nû de vedibe), Benoit Sevens, and Clement Lecigne of the company’s Threat Analysis Group said cybersecurity researchers from Lookout were right when they discovered, and warned users, of the existence of a dangerous Android virus (di tabloya nû de vedibe) called Hermit.

Hermit is allegedly built by an Italian software development company RCS Lab, and was initally used by state-sponsored actors to target certain individuals both in Italy and in Kazakhstan.

Extremely potent malware

The malware (di tabloya nû de vedibe) is extremely potent, and once installed on the device, can reach out to its command & control (C2) server to pick up numerous modules, including call loggers, audio recorders (both ambient and phone calls), photo and video harvesters, SMS and email readers, and location trackers.

Hermit works on all versions of Android, and is even capable of rooting the device to grant itself even more privileges.

Still, the app needs to be downloaded onto the device. That can’t be done via Google’s official Android repository, because it can’t be found there. Instead, the victims are lured into downloading the app via phishing SMS messages and according to Em Welat'ê, the attackers worked with the victims’ telecommunications providers to force them into downloading the app.

Now, as the existence of Hermit is confirmed, Google started reaching out to victims to warn them that they’re being targeted. No word on the number of people in question, but given the potential of the malware, we can assume it’s only a handful of high-profile individuals, possibly politicians, journalists, and civil rights activists.

Google has also obtained a version of the malware designed for Apple devices, and said it abuses the company’s enterprise developer certificate to allow the app to be sideloaded. It leveraged six new exploits, two of which are zero-days (di tabloya nû de vedibe). Apple is already working on a fix for one of them.

Via: Tek Crunch (di tabloya nû de vedibe)

Kanî

Post Next

This Android malware is so dangerous, even Google is worried

Di sala 2024-an de nermalava pêdivî ye

Kategoriyên top

Reviewsîroveyên dawî

Vîdyoya Teaser ya Samsung Galaxy Z Flip 5, Li pêşiya bûyera Galaxy Unpacked, Sêwirana Hinge ya Nû, Vebijarkên Rengê Nîşan dide

Twitter hejmara DM-yên ku bikarhênerên nerastkirî dikarin bişînin sînordar dike

Têlefona min a bijare ya Android dikare tiştên ku min iPhone 14 Pro Max nikare bike

ChatGPT ji bo Android hefteya pêş dest pê dike, û hûn dikarin nuha pêş-qeyd bikin

Xiaomi Smart TV 32A, Smart TV 40A, Smart TV 43A Bi Google TV, Axaftvanên 20W Li Hindistanê Destpê kirin: : Biha, Taybetmendî

Ev pîlê xwarinê dikare cîhana tespîtkirin û enerjiya domdar hêz bike