Disguised as VPN, this Iranian spy malware seeks to hack your Android smartphone

An Android spy virus is currently lurking on Telegram. For example, Disguised in VPN application, malware seeks to steal the personal data of users. Consequently, The malware is the work of a gang of pirates affiliated with Iran.

Lookout researchers have discovered A spy virus to attack Android smartphones. Therefore, Titled DCHSpymalware is part of a spy campaign orchestrated by MuddyWatera criminal gang sponsored by the Iranian state. For example, Active since 2017. Therefore. Consequently, the gang has been surrum known for having conducted targeted phishing attacks against telecommunications giants, defense agencies, oil kings, or governments from most continents, including Europe.

Lookout experts indicate that “New versions of Dchspy” Were deployed in the wake of the conflict in Iran. Similarly, marked by the destruction of three Iranian nuclear sites by B-2 stealth bombers disguised vpn, this iranian spy new sent by the United States.

Cut for surveillance operations, these disguised vpn, this iranian spy DCHSPY iterations share The same infrastructure as Sandstrikeanother formidable Spyware. Furthermore, These new samples “Show that Muddywater continues to develop its spy software, adding new features”explains Lookout. Meanwhile,

Read also: XSS. the Russian forum frequented by 50. 000 pirates, was dismantled by the French police

False apps shared on Telegram – Disguised vpn, this iranian spy – Disguised vpn, this iranian spy new

To spread DCHSPY malware, Muddywater pirates use False applicationsimitating VPN known for example. These fake applications are shared through messages published on Telegram. These messages redirect the user to a malicious website. which takes up the interface of official VPN platforms to the letter, such as Earthvpn, Comodovpn or Hidevpn. The sites include a page for downloading APK tank files. It is a worn tactic, but always terribly effective.

Reassured by the interface, Internet users will Install disguised vpn, this iranian spy new the APK of the Android trapped application On their smartphone. Once in the system. the virus will scrupulously collect the identifiers of disguised vpn. this iranian spy the accounts connected to the device, the contacts, the SMS messages, the recorded files, all location data, call history, audio recordings, photos taken via the camera, and all WhatsApp data. It’s a real Mountain of confidential information and sensitive which are exfiltrated by DCHSPY.

The Iranian cyber attack boom

Since the American strikes against Iranian nuclear sites. Cybercriminals close to Iran are increasing offensivesespecially against the United States. As the United States Domestic Security Department feared, Iranian pirates have bombed American targets from DDOS attacks. Aerospace giants, finance banks and behemoths have been affected and their sites were paralyzed. Shortly after. Iranian hackers published 100 GB of emails belonging to those close to Donald Trump, hacked during the last electoral campaign.

Lookout underlines disguised vpn, this iranian spy new following the activities of “17 distinct families of mobile malware. all linked to at least 10 Iranian pirate groups active for more than ten years”. These disguised vpn, this iranian spy 10 criminal groups are affiliated with the Iranian government and the country’s intelligence services.

As always, we advise you not to trust shared applications on the web. Before installing an APK file, make sure you Finding yourself on the official VPN website that you are looking for. Instead of going through a link found on Telegram. or another messaging, go directly to the Google search engine and search for the official website. Even better, satisfied with the applications provided on the Play Store.

🔴 To not miss any 01net news, follow us on Google News and Whatsapp.

Source : Lookout