Android.SmsSpy.88: Ένα trojan για Android που ανακαλύφθηκε από την Ρώσικη εταιρεία ασφάλειας Dr.Web, φαίνεται να έχει εξελιχθεί τα δύο τελευταία χρόνια από ένα απλό λογισμικό υποκλοπής spyware τραπεζικό trojan, σε μια κινητή απειλή ransomware.
It was first detected in April 2014. The trojan was initially distributed via SMS spam, and once it landed on the victim's device, it was able to monitor phone calls and messages SMS, commonly used by two-factor authentication systems.
Over time the Android.SmsSpy.88 trojan evolved to add the ability to intercept credit card data as the developer managed to mimic logins of popular Russian banking systems in Google Play.
But the biggest update was at the end of 2015. Dr.Web reports that the trojan is now able to fish for credentials from virtually any bank around the world, along with the ability to lock the user's screen and ask for ransom.
This increase in functionality has had an impact on the Trojan distribution model, which instead of SMS spam uses false Adobe Flash Player applications.
Dr.Web security company also noted that the trojan started using a highly customizable bank phishing popup, which allows malicious software owners to modify popup content much more easily to target any bank they want.
.
Οι τελευταίες εκδόσεις του Android.SmsSpy.88 χρειάζονται δικαιώματα διαχειριστή, μια σταθερή σύνδεση στο Internet, και είναι γεμάτες από επικίνδυνα χαρακτηριστικά.
The trojan before locking the device sends USSD, MMS, sends SMS spam to all phone contacts, and more.
All of these are managed by C&C servers, and Dr.Web claims to have identified over 50 different management and control servers.
The large number of different C&C servers is explained by the fact that the creator of Android.SmsSpy is extremely busy advertising and renting his infrastructure to other criminals on the Dark Web.
The researchers ισχυρίζονται ότι το Android.SmsSpy έχει θύματα σε 200 χώρες και μολύνει τουλάχιστον 40.000 κινητές συσκευές. Σε αυτές τις χώρες συμπεριλαμβάνεται η Τουρκία, η Ινδία, η Ισπανία, η Αυστραλία, η Γερμανία και η Γαλλία.
The most targeted version is Android 4,4 (35,71%), but Android.SmsSpy.88 can hit almost all Android versions from 2.3 to 5.2.
