Beware! Manic malware can sneak data on Android

Beware! Manic malware can sneak data on Android to hackers, even with offline phones.

According to a report by the website Security Affairs, a hybrid of banking Trojan and spyware focused on tackling users of a new Android operating system called Manic by the Mobile Threat Intelligence Team from ThreatFabric, an online fraud management specialist. The research team has identified the current malware in Ukraine through impersonating bank applications, state applications, Kryptokerrenzi applications, and the applications of various financial institutions in Russia and Europe, among others. The malware will be available. Monitor more than 169 applications in the state applications category, scriptokerrency applications such as Exchange and Crypto Wallet apps, and 2FA or 2-Factors Authentication apps, etc.

In the field of malware, after the victim has become addicted to a fake application with malware insertion into the machine, the malware will request access to the Accessibility Mode and Notification System, and then use the Accessibility Mode ability to capture data with Keylogging, such as screen unlock codes, email login codes, SMS or Short Message Service codes, Seed Phrases, long messages, etc., which can capture the PIN code of this malware by using Accessibility Mode traps from the real Numeric Keypad instead of the overlay screen. There is also an implementation of the autoEnterPin function used to enter the PIN code to unlock the screen without the victim knowing the automatic sample.

All captured data is logged as a Log with complete data, such as text, app name, package name, timestamp, and source of input, such as Manual Input or Autofill, etc. To export these data can be done even if the machine is not connected to the Internet with a Store-and-Forward Relay mechanism. At this point, malware-infected machines detect malware-infected machines through the Wi- channel. Fi Direct, Bluetooth RFCOMM, or BLE GATT then forwards the data to them so that the receiving machine forwards the stolen data back to the control server (C2 or Command and Control).

In addition to that, the malware also provides a tool called WebRTC to allow hackers to access and control the victim's machine remotely easily. Not only did the malware update during the month of July add a lot of malware to this malware - a stronger Anti-Analysis system, an In-Memory DEX Loading system, a fake screen use system to steal the PIN code, unlock the machine before reaching the real unlock screen (Lock-Secret Phishing), and also removing itself from the screen for activating applications (App Launcher). Hide yourself more closely from the eyes of your victims, too.

# Trending # lemon 8 diary # manic # freedomhack # Android