[ad_1]
cyber security threats Experts recently discovered a new variant of the malware named XLoader (commonly known as MoqHao). This variant has the ability to automatically infect devices without user interaction.called Mokuhao’s evolutionthis is a new version of the infamous android malware The organization has long had ties to Roaming Mantis, a group of financially motivated hackers based in China.
In this article, we will explore the background. Mokuhao’s evolution Learn more and see how it behaves differently from previous variants.
Evolution of MoqHao – Timeline
MoqHao is a mobile-based Android threat used for phishing purposes and first appeared on cyber security threats in 2015. Threat actors behind malware-launched attacks based on phishing activities via SMS (also known as SMS) “Smishing” In Asia. Mokhao’s main targets were Japan, South Korea, and Bangladesh.
However, it later moved to European countries such as France and Germany.This attracted the attention of many people cyber security threats Expert. Since this is notorious, they considered it a serious threat to users. Android malware It scammed thousands of users and stole their money.
recent reports I mentioned this Android malware It currently operates in 27 regional languages. This is a significant increase from his original four regional languages and highlights the broad nature of his target audience.
What has changed in Mokuhao?
The biggest difference from previous versions is Android malware And the latest thing is that it does not require any user interaction to infect the device. Previous variants required users to manually launch the malware.When the user clicks on the installation link received through her SMS app on the mobile phone, this new cyber security threats connects automatically Malicious code execution.
How does the evolved Mokuhao work?
Understanding how malware works Developing a cybersecurity strategy. It uses Unicode strings to disguise itself as a legitimate app, such as the Chrome web browser. However, if users are careful enough, they can identify it because the software’s name looks slightly different. for example, “chromium” “ch” will be displayedrahe”.
Once installed, the malware tricks users into granting dangerous permissions to various apps and notifications. MoqHao asks users to make the malicious application their default messaging app. That is, it may work in the background.
Such permissions allow malware to perform malicious actions without raising any red flags. The malware extracts landing URLs and phishing messages through the user’s girlfriend’s Pinterest profile. It also has the ability to run a wide range of commands, including:
- get_photo: Sends the user’s photo to the server.
- gcont: Transfers the user’s contact list to the control server.
- get_photo: A collection of data related to device identifiers, such as SIM numbers.
- sendSms: Send malicious messages by impersonating them.
conclusion
Data leakage cyber security threatsIn recent years, public interest has increased.of Mokuhao’s evolution It poses a major phishing threat to the world. Given the severity of the attack and its aftermath; Proactive cybersecurity measures This is essential as it can protect you from such threats and improve your overall security posture.
Sources for this article include the following articles McAfee and peepee computer.
The article MoqHao evolution poses immense threat to Android users appeared first on TuxCare.
*** This is a TuxCare Security Bloggers Network syndicated blog written by Wajahat Raja. Read the original post: https://tuxcare.com/blog/moqhao-evolution-poses-immense-threat-to-android-users/
[ad_2]
Source link
