Roaming Mantis uses DNS hijacking to infect Android smartphonesIn March 2018, Japanese media reported the hijacking of DNS settings on routers located in Japan, redirecting users to malicious IP addresses. The redirection led to the installation of Trojanized applications named facebook.apk and chrome.apk that contained Android Trojan-Banker. During our research we received some invaluable information about the true scale of this attack, we decided to call it ‘Roaming Mantis’.
Source:
Roaming Mantis uses DNS hijacking to infect Android smartphones
