Few days before several TBs of data were dumped in the Internet and the real fact about how the attack has been done is not revealed and now it is discovered. Recently Security researchers revealed the fact about the attack.
Security Researchers at Trend Micro has been analysis and found that there has been an Android Hacking tool that can be used to attack many number of devices. The tool is named as #RCSAndroid.
The tool requires no knowledge on hacking thus any script kiddie can run the tool and attack the victim and can spy the target without any difficulties.
The tool must be installed in the remote Android Phone and this can be done by sending the malicious link via social media and messaging application pretending to be something else and once the target clicks the link.
The Root privilege will be attained and the APK are installed in the target device and the features that can be accomplished by the installation of the tool are
Collect SMS,MMS
Take Screenshot
Get all the Saved Passowords
Record Calls
Take Photos using Front and Back camera
Gather Information about the device
Find the location
Record using Microphone
Gather contacts.
The spreading of app can also be done by exploiting some known vulnerabilities also and as the Backdoor the apps such as "#BeNews" can be used which are available under the Google Play Store.
Any version of Android can be targeted and the users are recommended not to click on any link from untrusted source or from any fake messages that are forwarded such as
Click the link to get 100 rs. Free Talktime
Frwd to 2 groups to get 100% battery charge
Click the link and getting blessing from God or bad things will happen for next 2 years
Click the link to win the offer.
These are just to fool you and users just think before you make a click. Don't be a victim.
P.S : The post is to create awareness and not to be misused.
No comments:
Post a Comment