Friday, May 9, 2025
HomeRansomwareCharger Ransomware that steals contacts and SMS messages from the user’s device...

Charger Ransomware that steals contacts and SMS messages from the user’s device – Energy Rescue

Published on

SIEM as a Service

Follow Us on Google News

Mobile Security researchers from Checkpoint recognize a new ransomware called Charger embedded in app EnergyRescue.

Like other malware found before, Charger checks the local settings of the device and does not run its malicious logic if the device is situated in Ukraine, Russia, or Belarus.This is likely done to shield the designers from being arraigned in their own nations or being removed between nations.

The charger was discovered inserted in an application called EnergyRescue.The damaged application takes contacts and SMS messages from the client’s device and requests administrator authorizations.

- Advertisement - Google News

If authorized ransomware locks the device and exhibits a message requesting payment.The ransom interest for 0.2 Bitcoins (generally $180) is a higher payoff request than has been found in mobile ransomware in this way.

You need to pay for us, otherwise, we will sell a portion of your personal information on black market every 30 minutes.

WE GIVE 100% GUARANTEE THAT ALL FILES WILL RESTORE AFTER WE RECEIVE PAYMENT. WE WILL UNLOCK THE MOBILE DEVICE AND DELETE ALL YOUR DATA FROM OUR SERVER! TURNING OFF YOUR PHONE IS MEANINGLESS, ALL YOUR DATA IS ALREADY STORED ON OUR SERVERS! WE STILL CAN Be SELLING IT FOR SPAM, FAKE, BANK CRIME etc… We collect and download all of your personal data.

All information about your social networks, Bank accounts, Credit Cards. We collect all data about your friends and family.

Likewise Also Read : No more ransom adds immense power to globe against Ransomware Battle

Adware usually found on Play gathers benefits from advertisement systems, however, mobile ransomware dispenses harm to clients. Like FakeDefender and DataLust, Charger could be a pointer of a more extensive exertion by mobile malware engineers to get up to speed with their PC ransomware cousins.

Charger SHA256 hash:
 58eb6c368e129b17559bdeacb3aed4d9a5d3596f774cf5ed3fdcf51775232ba0

Most malware found on Google Play has just a dropper that later downloads the original malware segments to the device.

Charger Ransomware that steals contacts and SMS messages from the user’s device - Energy Rescue

Charger, nonetheless, uses a real pressing methodology which it harder for the malware to remain hidden, so it must remunerate with different means.

The designers of Charger gave it all that they needed to lift its avoidance abilities thus it could remain covered up on Google Play for whatever length of time that conceivable.

Advanced Hidden methods

  • It encodes strings into binary arrays, making it difficult to assess them.
  • It loads code from encrypted assets progressively, which most recognition engines can’t enter and investigate.
  • The powerfully stacked code is likewise overflowed with senseless commands that veil the real commands going through.
  • It checks whether it is being kept running in an emulator before it begins its malicious activity. PC malware initially presented this procedure which is turning into a pattern in malware having been embraced by a few malware families including Dendroid.

Common Defence Against ransomware

1.Backup data.
2.Disable files running from AppData/LocalAppData folders.
3.Filter EXEs in the email.
4.Patch or Update your software.
5.Use the Cryptolocker Prevention Kit.
6.Use a reputable security suite.
7.CIA cycle(Confidentiality, integrity, and availability)
8.Utilize System Restore to recover the computer.
9.Disconnect Internet connection immediately.

Latest articles

Scattered Spider Malware Targets Klaviyo, HubSpot, and Pure Storage Platforms

Silent Push researchers have identified that the notorious hacker collective Scattered Spider, also known...

Chinese Hackers Exploit SAP RCE Vulnerability to Deploy Supershell Backdoors

A critical remote code execution (RCE) vulnerability, identified as CVE-2025-31324, in SAP NetWeaver Visual...

Hackers Target IT Admins by Poisoning SEO to Push Malware to Top Search Results

Cybercriminals are increasingly targeting IT administrators through sophisticated Search Engine Optimization (SEO) poisoning techniques. By...

New Mamona Ransomware Targets Windows Systems Using Abused Ping Command

Cybersecurity researchers are raising the alarm about a newly discovered commodity ransomware strain dubbed Mamona,...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

New Mamona Ransomware Targets Windows Systems Using Abused Ping Command

Cybersecurity researchers are raising the alarm about a newly discovered commodity ransomware strain dubbed Mamona,...

Play Ransomware Deployed in the Wild Exploiting Windows 0-Day Vulnerability

Patched Windows zero-day vulnerability (CVE-2025-29824) in the Common Log File System (CLFS) driver was...

DOGE Big Balls Ransomware Leverages Open-Source Tools and Custom Scripts for Multi-Stage Attacks

A recent discovery by Netskope Threat Labs has brought to light a highly complex...