Beware of the new money-sucking malware on Android "Perseus."

Beware of new money-sucking malware on Android. "Perseus" is found secretly smuggling data from various notebook apps to steal the code.

The name Perseus may be familiar as the name of a Greek hero and the name of a mage who was famous on satellite television and the Thai Internet more than 10 years ago, but this name may no longer be cool or funny, as it has already been used as a money-sucking malware or Banking Trokjan.

According to a report by The Hacker News website, the detection of a Banking Trojan campaign called Perseus, which has the ability to take over and completely control the victim's machine (DTO or Device Take Over). This malware is called a development of two malware types: Cerberus and Phoenix. Cerberus was first detected in 2019. This malware has been featured in Accessibility Mode and the ability to add Permission access to the system to itself. The source code of this malware has been leaked to the public, causing it to be developed into many sub-species such as Alien, ERMAC, Phoenix. To date, the upcoming Perseus example is based on the foundation of this malware, but the Flexibility has been added to make way for the spread by relying on Loader malware as an intermediary. Phishing scams with the convenient use of fake websites. The fake application used to trick the victim into installing the malware was revealed by the research team. The names are listed as follows:

Roja App Directa (com.xcvuc.ocnsxn) - Resume Bird Malware (Dropper)

TvTApp (com.tvtapps.live) - Perseus payload malware (payload) file

PolBox Tv (com.streamview.players) - Perseus Malware File

According to an in-depth analysis, the research team found that there is a possibility that hackers have introduced a large-scale language model (LLM or Large Language Model) of artificial intelligence into this malware development stage because many logging and Emoji records have been detected on the code, which is inconsistent from normal human coding. For that outbreak, a research team from ThreatFabric, a cyberdefense specialist, found that this malware is in a variety of areas such as Turkey, Italy, Poland, Germany, France. The United Arab Emirates and Portugal, especially the first two countries, will have particularly heavy outbreaks.

The ability of such malware to the victim's machine is called abundant, such as

Scan _ notes, used to copy data from Note-Taking Apps such as Google Keep, Xiaomi Notes, Samsung Notes, ColorNote Notepad Notes, Evernote, Simple Notes Pro, Simple Notes, and Microsoft OneNote (but the package name on the code is misstated as "com.microsoft onenote" instead of "com.microsoft.office onenote").

Start _ vnc, used to convey the victim's machine screen almost near real time (Real-Time).

Stop _ vnc, used to close Session d Remote Control

Start _ hvnc, used to convey the structure data. The sequence of the UI or User Interface goes back to the malware controller hacker to access the victim's screen.

Stop _ hvnc, used to close Session d Remote Control

Enable _ accessibility _ screenshot, used to open the Screenshot feature through Accessibility Mode

Disable _ accessibility _ screenshot, disable the Screenshot feature through Accessibility Mode

Disable _ accessibility _ screenshot, disable the Screenshot feature through Accessibility Mode

Unblock _ app, used to remove the name of the application from the blocking list or Blocklist

Clear _ blocked, to clear the entire list of blocked applicants.

Action _ blackscreen, used to open the black screen to overlay (Overlay) the malware working screen

Nighty, used to mute the victim machine.

Click _ coord, used to swipe the screen (Tap) at the desired location

Install _ from _ unknown, used to manage the installation of unkown Sources.

Start _ app, used to open applications that hackers want.

In addition, this malware has the ability to evade being analyzed (Anti-Analysis), resist being debugged (Anti-Debugged), and check if a SIM card (SIM) is inserted correctly.

# Trending # Lemon 8 Howtoo # Drug sign with lemon8 # Android # freedomhack