Android Trojan Steals Data From Facebook Messenger, Skype, Other IM Clients

guest · Apr 3, 2018

Android Trojan Steals Data From Facebook Messenger, Skype, Other IM Clients
April 3, 2018
https://www.bleepingcomputer.com/ne...om-facebook-messenger-skype-other-im-clients/

This new trojan is quite simple in its design, researcher from cyber-security firm Trustlook said in a report published on Monday.

The trojan has only a few abilities. The first is to gain boot persistence by unpacking code from an infected app's resources. The code will attempt to modify the "/system/etc/install-recovery.sh" file, which if successful, would allow the malware execute with every boot.

Researchers spotted the malware inside a Chinese app named Cloud Module (in Chinese), with the package name com.android.boxa.
Simple features, but advanced evasion techniques
For example, the malware uses anti-emulator and debugger detection techniques to evade dynamic analysis, and also hides strings inside its source code to thwart lackadaisical code reversing attempts.

[...] the malware's authors may be distributing the malicious app via third-party stores and links on Android app forums.
Click to expand...

Log in or Sign up

Android Trojan Steals Data From Facebook Messenger, Skype, Other IM Clients

guest Guest

Log in or Sign up

Android Trojan Steals Data From Facebook Messenger, Skype, Other IM Clients

guest Guest

Useful Searches