Lookout warnt vor neuer Android-Spyware - silicon de silicon.de - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from silicon.de Daily Mail and Mail on Sunday newspapers.
Share this article
SAN FRANCISCO, Feb. 11, 2021 /PRNewswire/ Lookout, Inc
., the leader in mobile security, today announced the discovery of two novel Android surveillanceware, Hornbill and SunBird. The
Lookout Threat Intelligence team believes these campaigns are connected to the Confucius APT, a well-known pro-India state-sponsored advanced persistent threat group. Hornbill and SunBird have sophisticated capabilities to exfiltrate SMS message content, encrypted messaging app content, geolocation, contact information, call logs, as well as file and directory listings. The surveillanceware targets personnel linked to Pakistan s military and nuclear authorities and Indian election officials in Kashmir.
The Confucius group was previously reported to have first leveraged mobile malware in 2017 with ChatSpy
Named
Goontact, this malware has the ability to collect from infected victims data such as phone identifiers, contacts, SMS messages, photos, and location information.
Detected by mobile security firm Lookout, the Goontact malware is currently distributed via third-party sites promoting free instant messaging apps dedicated to reaching escort services.
The target audience of these sites appears to be limited at the moment to Chinese speaking countries, Korea, and Japan, Lookout said in a report shared today with
ZDNet.
Although the malware has yet to reach official Apple and Google app stores, there are signs that users are downloading and side-loading Goontact-infected applications.
Goontact is new phone virus targeting Android, iPhone users mostly in Asia
Goontact is new phone virus targeting Android, iPhone users mostly in Asia
The spyware or malware strain with spying and surveillance capabilities was first detected by Lookout, a mobile security firm. Goontact malware is distributed via third-party sites promoting free instant messaging apps dedicated to reaching escort services.
advertisement
UPDATED: December 16, 2020 17:40 IST
Screenshot of Goontact Android samples displaying the possible lures to entice individuals shared by Lookout. (Picture: Lookout)
HIGHLIGHTS
A new malware strain found by security researchers called Goontact has been found targeting Android and iOS users.