Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking
Google Warns Spyware Being Deployed Against Android, iOS Users

Google Warns Spyware Being Deployed Against Android, iOS UsersPost Views: 8
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes
Google is warning victims in Kazakhstan and Italy that they are being targeted by Hermit, a sophisticated and modular spyware from Italian vendor RCS Labs that not only can steal data but also record and make calls.
Researchers from Google Threat Analysis Group (TAG) revealed details in a blog post Thursday by TAG researchers Benoit Sevens and Clement Lecigne about campaigns that send a unique link to targets to fake apps impersonating legitimate ones to try to get them to download and install the spyware. None of the fake apps were found on either Apple’s or Google’s respective mobile app stores, however, they said.

TAG is attributing the capabilities to notorious surveillance software vendor RCS Labs, which previously was linked to spyware activity employed by an agent of the Kazakhstan government against domestic targets, and identified by Lookout research.

“We are detailing capabilities we attribute to RCS Labs, an Italian vendor that uses a combination of tactics, including atypical drive-by downloads as initial infection vectors, to target mobile users on both iOS and Android,” a Google TAG spokesperson wrote in an email to Threatpost sent Thursday afternoon.

All campaigns that TAG observed originated with a unique link sent to the target that then tries to lure users into downloading Hermit spyware in one of two ways, researchers wrote in the post. Once clicked, victims are redirected to a web page for downloading and installing a surveillance app on either Android or iOS.

“The page, in Italian, asks the user to install one of these applications in order to recover their account,” with WhatsApp download links specifically pointing to attacker-controlled content for Android or iOS users, researchers wrote. Collaborating with ISPsOne lure employed by threat actors is to work with the target’s ISP to disable his or her mobile data connectivity, and then masquerade as a carrier application sent in a link to try to get the target to install a malicious app to recover connectivity, they said.

Researchers outlined in a separate blog post by Ian Beer of Google Project Zero a case in which they discovered what appeared to be an iOS app from Vodafone but which in fact is a fake app. Attackers are sending a link to this malicious app by SMS to try to fool targets into downloading the Hermit spyware.

“The SMS claims that in order to restore mobile data connectivity, the target must install the carrier app and includes a link to download and install this fake app,” Beer wrote.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png Indeed, this is likely the reason why most of the applications they observed in the Hermit campaign masqueraded as mobile carrier applications, Google TAG researchers wrote.

In other cases when they can’t work directly with ISPs, threat actors use apps appearing to be messaging applications to hide Hermit, according to Google TAG, confirming what Lookout previously discovered in its research. iOS Campaign RevealedWhile Lookout previously shared details of how Hermit targeting Android devices works, Google TAG revealed specifics of how the spyware functions on iPhones.

They also released details of the host of vulnerabilities—two of which were zero-day bugs when they were initially identified by Google Project Zero—that attackers explo[...]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking

Google Warns Spyware Being Deployed Against Android, iOS Users | Black Hat Ethical Hacking

Google is warning victims in Kazakhstan and Italy that they are being targeted by Hermit, a sophisticated and modular spyware from Italian vendor RCS Labs that not only can steal data but also record and make calls.

6 viewsedited 08:17

Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking
Google Warns Spyware Being Deployed Against Android, iOS Users

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking

Google Warns Spyware Being Deployed Against Android, iOS Users | Black Hat Ethical Hacking

4 viewsedited 08:17

Hacking Articles Tips Tricks Videos Tutorials

My Pentest Log -22 — (Account Takeover Via Sinf file)
https://hcibo.medium.com/my-pentest-log-22-account-takeover-via-sinf-file-e6c8dcc7eac6?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

My Pentest Log -22 — (Account Takeover Via Sinf file)

Greetings to all from Porta Petrion,

4 viewsedited 09:27

Hacking Articles Tips Tricks Videos Tutorials

4 views09:27

Hacking Articles Tips Tricks Videos Tutorials

Greetings to all from Porta Petrion,Continue reading on Medium » (https://hcibo.medium.com/my-pentest-log-22-account-takeover-via-sinf-file-e6c8dcc7eac6?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

My Pentest Log -22 — (Account Takeover Via Sinf file)

Greetings to all from Porta Petrion,

4 viewsedited 09:27

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Search engine result suppression

Any successful experience/methods to removing negative search engine results or at least pushing them to secondary pages?

submitted by /u/billslivesmatter
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Search engine result suppression

Any successful experience/methods to removing negative search engine results or at least pushing them to secondary pages?

6 viewsedited 09:55

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
How are kernel exploits found/created

I got curious when reading about the new PlayStation BD-JB and some of the new iOS kernel exploits. And made me wonder how ate they discovered/made

submitted by /u/Putrid-Soft3932
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How are kernel exploits found/created

I got curious when reading about the new PlayStation BD-JB and some of the new iOS kernel exploits. And made me wonder how ate they discovered/made

5 viewsedited 09:55

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Is remote controlling any device connected on my network possible?

Since I think remote controlling anything using a PC is sick as hell, how can I do It with any device connected to my internet? If I have for example 4 devices connected to my network, and I want to remote access them without having to physically come to them look at the screen to see a password or something. Is there a way to do this? Numerous google searches showed otherwise, but since everybody here is significantly smarter than me, I think you have an answer.

Thanks if you respond!

submitted by /u/Inner_Information_26
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Is remote controlling any device connected on my network possible?

Since I think remote controlling anything using a PC is sick as hell, how can I do It with any device connected to my internet? If I have for...

5 viewsedited 09:55

Hacking Articles Tips Tricks Videos Tutorials

4 views10:18

About

Blog

Apps

Platform