Beware of fake IPTV apps on Android

Beware of fake IPTV apps on Android already installed, may be sucked in money from a bank account.

IPTV or Internet Protocol Television is a system of watching television on the Internet using a viewing box or Set Top Box, but in the latter, it was developed as an application, which may be used in tandem or one of the providers, and that allows for impersonation of fake applications to spread into the machine of victims who expect to watch free of charge, as in this news.

According to a report by the website, The Hacker News has mentioned the detection of a Trojan-type malware distribution campaign that focuses on attacks on a group of users of the Android operating system called Massiv. This malware has the ability to gain full control of the victim machine, or Device Take Over (DTO), with remote control, with the aim of financial espionage from embedded malware victims. This malware, according to a research team from ThreatFabric who detected it, has detected a campaign in the early years that the campaign will Focusing on a group of people living in Greece and Portugal, the malware has now been reported to have spread in other countries, such as France and Turkey. Likewise, the malware can be traced back to the early part of 2025, where the test campaign began.

Dispersing malware, hackers send links to targeted victims via the Short Message Service (SMS or Short Message Service) by deceiving them as IPTV applications. This leads to the downloading of malware (Dropper) before downloading the malware file (Payload) on the machine via deception after the victim has attached the Dropper to the machine that an update is required to allow the victim to approve the installation of a file outside the official download source (External Source). This malware is eventually installed. The files associated with the malware are as follows:

IPTV24 (hfgx.mqfy.fejku) - Dropper

Google Play (hobfjp.anrxf.cucm) - Massiv

Massiv malware can be called capable of manipulating a victim's machine.

Mute and vibration, and the use of a black overlay screen to obscure the operation.

Stealing and sending machine data to hackers

Clicking and swiping the screen

Changes in Clipboard

Discontinuation of black screen

Screen Streaming to hackers

Unlocking the screen with Pattern Drawing (Pattern)

Using Overlay to trap application entry codes and screen unlocking codes (PIN)

Downloading a Zip file containing Overlay screen information of the target application to apply the previous clause.

Download and install APK files

Battery Optimization Feature Activation, Device Admin Screen and Play Protect Feature Tuning Screen

Requesting permission to install APK files and access SMS messages

Removing the Log Database

UI-Tree Mode is also used to collect screen data, or the User Interface of an application with screen streaming protection. Make a chart with the details of the JSON file. Send it back to the hackers so it can be used conveniently.

# Trending # Lemon 8 Howtoo # lemon 8 diary # IPTV # freedomhack