SonicSpy Android Spyware Records Audio, Snoops on Call Logs

Researchers have identified over 1,000 spyware-infested apps capable of recording audio and snooping on phone call logs, contacts, and more.

Three such apps fabricated their manner into Google Play; they accept since been removed. The rest appeared on third-party Android app stores, Scout Security details in a web log post.

The malware in question, SonicSpy, appears to have originated in Iraq, Lookout says. Information technology was unleashed in February, and showed up in Google Play via iii messaging apps: Hulk Messenger, Troy Chat, and Soniac.

Soniac is a "customized version of the communications app Telegram, [which] contains malicious capabilities that provide an attacker with significant control over a target device," writes Michael Flossman, Security Inquiry Services Tech Atomic number 82 at Lookout.

"This includes the ability to silently tape audio, take photos with the camera, brand outbound calls, transport text letters to attacker specified numbers, and retrieve information such as call logs, contacts, and information about Wi-Fi access points," Flossman says. When installed, "SonicSpy will remove its launcher icon to hibernate itself from the victim."

Google removed Soniac later Lookout reported it; Hulk Messenger and Troy Chat were also removed from Google Play, but it's unclear if Google deleted them "or if the role player behind SonicSpy removed them in club to evade detection for as long as possible," Flossman says.

Lookout says SonicSpy is like to SpyNote, some other strain of malware from mid-2016. "Both families share code similarities, regularly brand apply of dynamic DNS services, and run on the non-standard 2222 port," Picket says.

"This kind of functionality should exist highly apropos to whatsoever party accessing sensitive information through mobile devices, including enterprises," Lookout says in a carve up blog post.

"Enterprises often transport employees overseas for conferences, customer meetings, etc and while traveling, employees use messaging apps to communicate with coworkers and family dorsum home," Lookout warns. "Apps like SonicSpy capitalize on this by pretending to exist trustworthy apps in well-known marketplaces."

About Chloe Albanesius

Chloe has led PCMag's news coverage for more than x years, editing and writing stories well-nigh the innovations that have shaped the last decade and the companies behind them. She also oversees the site's how-to coverage. Earlier joining PCMag.com, Chloe was a reporter covering tech policy on Capitol Colina for The National Journal'south Technology Daily and fiscal Information technology for Incisive Media in NYC. She's held internships at NBC's Meet the Press, washingtonpost.com, the Tate Gallery printing part in London, Gyre Call, and Congressional Quarterly. She graduated with a bachelor'southward caste in journalism from American University in Washington, D.C.

Source: https://sea.pcmag.com/news/16982/sonicspy-android-spyware-records-audio-snoops-on-call-logs

Posted by: olszewskifordece.blogspot.com

Share this post