Hacking Group Spies on Android Users in India Using PoriewSpyWe have been seeing attacks that spy on and steal data from specific targets on the mobile platform since late 2017. We discovered the malicious apps victimizing Android users in India, and believe a hacking group—one previously known for victimizing government officials—carried out the attacks. We identified these malicious apps as PoriewSpy (detected by Trend Micro as ANDROIDOS_PORIEWSPY.HRX). We also suspect that the group used malicious apps built using DroidJack or SandroRAT (detected as ANDROIDOS_SANRAT.A), based on similarities in their command-and-control (C&C) server. DroidJack is a remote access Trojan (RAT) that allows intruders to take full control of a user's Android device when installed.
Post from: Trendlabs Security Intelligence Blog - by Trend Micro
Hacking Group Spies on Android Users in India Using PoriewSpy
Source:
Hacking Group Spies on Android Users in India Using PoriewSpy
