Saturday, July 13, 2024

Meta Unveils 8 Spyware Companies Targeting iOS, Android, & Windows Devices

Spyware firms target iOS, Android, and Windows devices due to their widespread usage, making them lucrative targets for gathering sensitive information. 

Each platform offers unique exploitation opportunities, with iOS and Android dominating the mobile market, while Windows remains a primary operating system for computers. 

This complete scenario provides diverse avenues for surveillance and data collection.

Recently, Meta Platforms acted against eight surveillance-for-hire firms in Italy, Spain, and the U.A.E., as per the Q4 2023 “Adversarial Threat Report.” 

Cybersecurity researchers at Meta Platform have reported that spyware from these companies has been actively targeting iPhones, Android, and Windows devices.

Live Account Takeover Attack Simulation

How do Hackers Bypass 2FA?

Live attack simulation Webinar demonstrates various ways in which account takeover can happen and practices to protect your websites and APIs against ATO attacks.

Meta Warns Of 8 Spyware Firms

The malware used by spyware firms has stealthy features and capabilities that enable threat actors or operators to collect sensitive information from the targeted devices.

The following device information was accessed and collected by the malware:- 

  • Location
  • Photos
  • Media
  • Contacts
  • Calendar
  • Email
  • SMS
  • Social media
  • Messaging apps

Besides this, it also enables and gives threat actors accessibility to these elements of the targeted devices: microphones, cameras, and screenshots.

Spyware Firms Involved

Here below, we have mentioned all the spyware firms involved:-

  • Cy4Gate/ELT Group
  • RCS Labs
  • IPS Intelligence
  • Variston IT
  • TrueL IT
  • Protect Electronic Systems
  • Negg Group
  • Mollitiam Industries

Cybersecurity researchers asserted that all the above-mentioned spyware firms are also found to be engaged in scraping, social engineering, and phishing activity that targets a wide range of social platforms.

Fake personas linked to RCS Labs deceived users for phone numbers, email addresses, and surveillance. 

Now removed, Variston IT’s Facebook and Instagram accounts aided exploit development and testing. 

Meta reports that Variston IT is discontinuing operations. Negg Group and Mollitiam Industries were also identified for spyware testing and data collection.

Swedish telecom security firms suspect that the cyber attack method involves a unique binary SMS (MM1_notification.REQ) notifying of MMS, retrieved via MM1_retrieve.REQ and MM1_retrieve.RES, embedding device info in GET request as a fingerprint. 

Moreover, it has potential for spyware deployment, tailored exploits, and phishing campaigns, but no recent evidence of exploitation in the wild.

Stay updated on Cybersecurity news, Whitepapers, and Infographics. Follow us on LinkedIn & Twitter.


Latest articles

mSpy Data Breach: Millions of Customers’ Data Exposed

mSpy, a widely used phone spyware application, has suffered a significant data breach, exposing...

Advance Auto Parts Cyber Attack: Over 2 Million Users Data Exposed

RALEIGH, NC—Advance Stores Company, Incorporated, a prominent commercial entity in the automotive industry, has...

Hackers Using ClickFix Social Engineering Tactics to Deploy Malware

Cybersecurity researchers at McAfee Labs have uncovered a sophisticated new method of malware delivery,...

Coyote Banking Trojan Attacking Windows Users To Steal Login Details

Hackers use Banking Trojans to steal sensitive financial information. These Trojans can also intercept...

Hackers Created 700+ Fake Domains to Sell Olympic Games Tickets

As the world eagerly anticipates the Olympic Games Paris 2024, a cybersecurity threat has...

Japanese Space Agency Spotted zero-day via Microsoft 365 Services

The Japan Aerospace Exploration Agency (JAXA) has revealed details of a cybersecurity incident that...

Top 10 Active Directory Management Tools – 2024

Active Directory Management Tools are essential for IT administrators to manage and secure Active...
Tushar Subhra Dutta
Tushar Subhra Dutta
Tushar is a Cyber security content editor with a passion for creating captivating and informative content. With years of experience under his belt in Cyber Security, he is covering Cyber Security News, technology and other news.

Free Webinar

Low Rate DDoS Attack

9 of 10 sites on the AppTrana network have faced a DDoS attack in the last 30 days.
Some DDoS attacks could readily be blocked by rate-limiting, IP reputation checks and other basic mitigation methods.
More than 50% of the DDoS attacks are employing botnets to send slow DDoS attacks where millions of IPs are being employed to send one or two requests per minute..
Key takeaways include:

  • The mechanics of a low-DDoS attack
  • Fundamentals of behavioural AI and rate-limiting
  • Surgical mitigation actions to minimize false positives
  • Role of managed services in DDoS monitoring

Related Articles