Recently cymperiummobile security company has discovered a new variety malware for android call RatMilad. According to the information, the new malware is being used for cyber espionage, extortion, as well as listening in on victims’ conversations. The company also points out that the cybercriminals behind RatMilad are using random targets rather than targeting specific individuals or companies.

According to a study published on the official Zimperium blog, the team found that spyware targeting mobile devices is hiding behind a rogue VPN and phone number spoofing app called NumRent. So this app is distributed through social media links as well as messaging apps like Telegram and WhatsApp.

So, in order to convince and gain the trust of victims in the legitimacy of the application, cybercriminals even created a website advertising the service. When downloaded, the application asks for permissions to access various settings on the device, and the malicious code itself installs.

“The original version of RatMilad hid behind a VPN and a phone number spoofing app called Text Me with the premise of allowing the user to verify a social media account using their phone, a common method used by social media users in countries where access may be restricted. be limited, or who might need a second verified account. Armed with spyware information, the zLabs team recently uncovered a live sample of the RatMilad malware family hidden and distributed via NumRent, a renamed and graphically updated version of Text Me. “reveals the article.

Information spied by RatMilad

When a user installs a rogue app, RatMilad hides behind a VPN connection and infiltrates data such as:

• MAC address of the device;
• List of contacts;
• SMS list;
• Call log;
• Account names and permissions;
• clipboard data;
• GPS location data;
• information about the sim;
• List of files;
• Reading, writing, deleting files;
• Sound recording;
• File upload for C&C;
• List of installed applications along with their permissions;
• Set new app permissions;
• Phone information – model, brand, BuildID, Android version, manufacturer.

It is important to note that in order to protect against RatMilad and other malware, users are advised not to install applications from third-party sites or stores. You can always check the information about the application through official storesas Game Store as well as App Store.

See also: John McAfee: The Story of Tech’s Most Controversial Millionaire

Home theater LG XBOOM LHD687 | Differentiated audio and video product
Check out our short review of the LG LHD687 Home Cinema, a device fit for giant screens.

Via: Neowin Source: Zimperium

…..