New versions of FinFisher mobile spyware discovered in Myanmar

guest · Jul 10, 2019

New versions of FinFisher mobile spyware discovered in Myanmar
New and upgraded versions of FinFisher spyware for Android and iOS discovered in 20 countries
July 10, 2019
https://www.zdnet.com/article/new-versions-of-finfisher-mobile-spyware-discovered-in-myanmar/

Security researchers from Kaspersky Lab have discovered new and improved versions of the FinFisher spyware.

The upgraded FinFisher (FinSpy) versions are now capable of collecting and exfiltrating a wide array of personal data from infected phones, such as contacts, SMS/MMS messages, emails, calendars, GPS location, photos, and data from the phone's RAM.
FnFisher has always had implants for both desktop and mobile operating systems, but these new versions targeting smartphones put the mobile implants on par with the more advanced desktop versions.
FINFISHER MOBILE IMPLANT CAPABILITIES
According to a technical analysis of the new samples, the Android and iOS versions have nearly identical capabilities, according to Kaspersky, with a few differences here and there in regards to infection methodology and supported IM clients.

Clues in the iOS implant's code suggest remote infection vectors such as SMS, email, or WAP Push don't work unless the device has been jailbroken.
Jailbreaking doesn't play a big role on Android smartphones, though. [...] FinFisher Android variant will look for tools like SuperSU and Magisk [...] or use the DirtyCow exploit, to get root privileges.
Click to expand...

Kaspersky: New FinSpy iOS and Android implants revealed ITW

Log in or Sign up

New versions of FinFisher mobile spyware discovered in Myanmar

guest Guest

Log in or Sign up

New versions of FinFisher mobile spyware discovered in Myanmar

guest Guest

Useful Searches