WolfRAT targets WhatsApp, Facebook Messenger app users on Android devices

guest · May 19, 2020

WolfRAT targets WhatsApp, Facebook Messenger app users on Android devices
The new malware is unstable and appears to be a slapdash effort based on leaked DenDroid code
May 19, 2020
https://www.zdnet.com/article/wolfr...p-facebook-messenger-apps-on-android-devices/

A new Trojan has been caught targeting Thai users of Whatsapp, Facebook Messenger, and Line messaging apps on the Android mobile platform.

On Tuesday, Cisco Talos researchers said the malware, dubbed WolfRAT, is a new variant of DenDroid, a mobile Remote Access Trojan (RAT) that had its source code leaked in 2015.
However, since its leak, variants have appeared that utilize the code -- but not necessarily improved upon it.

WolfRAT begins its infection chain through fake update lures abusing legitimate services including Flash and Google Play.
Messenger apps, in particular, are targeted, due to content exfiltrating functions alongside the theft of browser histories.
Click to expand...

Talos says the malware is under constant development and it may be the case that meeting the expectations of customers has resulted in rushed jobs, in which old code and redundant functions are ignored.

"The ability to carry out these types of intelligence-gathering activities on phones represents a huge score for the operator. The chat details, WhatsApp records, messengers, and SMSs of the world carry some sensitive information and people choose to forget these when communications occur on their phone."
Click to expand...

Cisco Talos: The wolf is back...

We assess with high confidence that this modified version is operated by the infamous Wolf Research.

This actor has shown a surprising level of amateur actions, including code overlaps, open-source project copy/paste, classes never being instanced, unstable packages and unsecured panels

WolfRAT is based on a previously leaked malware named DenDroid. The new malware appears to be linked to the infamous Wolf Research organization and targets Android devices located in Thailand.
Click to expand...

Log in or Sign up

WolfRAT targets WhatsApp, Facebook Messenger app users on Android devices

guest Guest

Log in or Sign up

WolfRAT targets WhatsApp, Facebook Messenger app users on Android devices

guest Guest

Useful Searches