FROGUE download12/12/2023 The overall code and data flow remains the same. The changes involve strings like the package name and java classes. The Trojan itself has been around for a while, but the malware authors are serving up polymorphic files–which change with each visit. They offer versions for iOS, Android, Nokia, Windows Phone, and Blackberry. It offers a description of WhatsApp, comments section, and download page. The site is pretty basic and scrapes some of the content from the legitimate WhatsApp website. The vast majority of Android malware are SMS Trojans and they rely on social engineering–like this rogue site–to get as many installs as possible. In our efforts to keep on top of SMS Trojans, we came across this site and thought we’d show an example of how this scam is performed. While this type of Trojan and method of delivery are not new, they must continue to be a good source of revenue for malware distributors. This particular site, aimed at Russian speakers, serves up a premium-rate SMS Trojan, SMS fees for access to install what hopefully is the WhatsApp app. So it’s no surprise we’d find a rogue website offering a way to download it. WhatsApp is one of the most popular mobile apps today and is frequently targeted by malware, hackers and copycats.
0 Comments
Leave a Reply.AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |