Russian malware that targets users has appeared in the airwaves Androidu. Specifically, it is spyware that is capable of reading text messages or eavesdropping on calls and recording conversations using a microphone.
The war in Ukraine has caused an increase in cyber attacks around the world. Many hackers, including those from Russia and China, are taking advantage of this situation to spread malware and steal user data. Against this background, experts from S2 Grupo Lab52's cybersecurity laboratory have now discovered a new malware targeting devices with Androidem. It originates from Russia and spreads through the Internet through seemingly harmless APK files.
The malicious code hides in an application called Process Manager. Once an unsuspecting victim installs it, the malware takes over their data. Before that, however, it will ask for a set of permissions to access your device's location, GPS data, various nearby networks, Wi-Fi information, text messages, calls, sound settings, or your contact list. Then, without the user's knowledge, it activates the microphone or starts taking pictures from the front and rear cameras.
You could be interested in
All data from the compromised smartphone is received by a remote server in Russia. To prevent the user from deciding to delete the app, the malware makes its icon disappear from the home screen. This is what many other spyware programs do to make them forget about it. At the same time, the malware installs an app called Roz Dhan: Earn Wallet cash, which looks legitimate, from the Google Play Store without the user's permission. However, in reality, it is used by hackers to make a quick buck. So if you have installed Process Manager, delete it immediately. As always, we recommend downloading apps only from the official Google store.
Aha.
So it works exactly like google, only the target server that receives my data is in Russia. That's a bummer though, my data in friendly USA is perfectly fine, but not in Russia. So you have to be careful about that malware.
So his behavior is not quite standard after all.