An Open-source Programming language “kotlin” has bee used to develop malicious Android apps that are capable of hijacking an Android mobile and as a similar malicious Android app called Swift Cleaner has discovered in Google Play store.
In May 2017 Google announced kotlin Programming language to Develop an Android application and the Android team has seen more than 17 percent of Android Studio projects use Kotlin.
Top Giant Android apps such as Netflix, Pinterest, Twitter are the top apps that using kotlin programming language.
The same language used a Malicious Andoird application called “Swift Cleaner” an android utility for cleans and optimizes Android devices found in Google Play Store.
This Malicious app capable of performing click fraud, execute the remote command, stealing the user information also sign up users for premium SMS subscription services without their permission.
Once user download and install this malicious app on their device, it collects the user device information and sends it across to its command and control server.
Later it starts background services that keep running for receiving a task from its command & control server.
This malware sending an SMS to a specific number that provided by its C&C server when user infect at the first time.
Later the malware receives the SMS command, the remote server will execute URL forwarding and click ad fraud also this malware performing the Wireless Application Protocol (WAP) task by executing the remote command from C&C Server.
Accoirnding to Trend Micro, the injection of the malicious Javascript code will take place, followed by the replacement of regular expressions, which are a series of characters that define a search pattern. This will allow the malicious actor to parse the ads’ HTML code in a specific search string
It also performs some advanced functions such as uploading service provider information, CAPTCHA, and login information to C&C, by having that information it enables premium SMS service subscription at victim cost.
A groundbreaking technique for Kerberos relaying over HTTP, leveraging multicast poisoning, has been recently detailed…
Since mid-2024, cybersecurity researchers have been monitoring a sophisticated Android malware campaign dubbed "Tria Stealer,"…
Proton, the globally recognized provider of privacy-focused services such as Proton VPN and Proton Pass,…
The cybersecurity landscape faces increasing challenges as Arcus Media ransomware emerges as a highly sophisticated…
Proofpoint researchers have identified a marked increase in phishing campaigns and malicious domain registrations designed…
A recent investigation by Unit 42 of Palo Alto Networks has uncovered a sophisticated, state-sponsored…
