Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le janvier 19, 2023, 11:00:17

Titre: [SecList]Roaming Mantis implements new DNS changer in its malicious mobile app in 2022
Posté par: igor51 le janvier 19, 2023, 11:00:17
Roaming Mantis implements new DNS changer in its malicious mobile app in 2022

Roaming Mantis (a.k.a Shaoye) is a long-term cyberattack campaign that uses malicious Android package (APK) files to control infected Android devices and steal data. In 2022, we observed a DNS changer function implemented in its Android malware Wroba.o.
Source: Roaming Mantis implements new DNS changer in its malicious mobile app in 2022 (https://securelist.com/roaming-mantis-dns-changer-in-malicious-mobile-app/108464/)