أصيبت البرامج الضارة لسرقة كلمة المرور بأكثر من 100,000 المستخدمين عبر متجر Google Play

Security specialists from Pradeo discovered password-stealing malware in the official Google Play Store app store.

The malware masquerades as the Craftsart Cartoon Photo Tools app and has been installed over 100,000 مرات.

البرامج الضارة لسرقة كلمة المرور

The dangerous app prompted users to upload their photos and other images in order to visually stylize them with cartoonish graphics. في الحقيقة, Craftsart Cartoon Photo Tools contains the FaceStealer trojan, which displays the Facebook login screen and requires users to log into an account before they can start.

Android/Trojan.Spy.Facestealer shows the use of an affected system screens that ask for the user’s input and finally the user is shown the Facebook login page and asks to log in. It is supposed that at this point injected malicious javascript steals the login credentials and sends them to a Command & Control server.experts from Malverbytes.Labs talk about the malware.

If the user does not notice the trick and indeed enters his username and password, the application sends them to the attackerscontrol server at zutuu[.]معلومات (فيروس توتال). فضلاً عن ذلك, the malware binds to a URL at www.dozenorms[.]club (فيروس توتال), where it sends additional data about the system. This address has already been used for other malicious applications containing FaceStealer.

البرامج الضارة لسرقة كلمة المرور

After entering the Facebook credentials, nothing interesting happens: the application simply uploads the custom image to the color.photofuneditor.com online editor, which applies the desired graphic filter to it. The result will be displayed in the application, and it can be downloaded or sent to friends.

وفق Pradeo المحللين, the author of the app seems to have automated the repackaging process and injected only a small piece of malicious code into a legitimate app. These tricks helped him to bypass the جوجل Play Store verification process.

The researchers warn that while Craftsart Cartoon Photo Tools is still available in the app store, they advise users to pay attention to the reviews of other users before downloading. Anyway, the malware has only 1.7 stars out of five possible, and in the reviews, many warn that the application has limited functionality and requires login via Facebook.

Let me remind you that we wrote that TeaBot Malware Infiltrates Google Play Store Again, and also that اكتشف الخبراء زينومورف البرمجيات الخبيثة في متجر Google Play.

هيلجا سميث

كنت دائمًا مهتمًا بعلوم الكمبيوتر, خاصة أمن البيانات والموضوع, وهو ما يسمى في الوقت الحاضر "علم البيانات", منذ سنوات مراهقتي المبكرة. قبل الانضمام إلى فريق Virus Removal كرئيس تحرير, عملت كخبير في الأمن السيبراني في العديد من الشركات, بما في ذلك أحد مقاولي أمازون. تجربة أخرى: لقد حصلت على التدريس في جامعات أردن وريدينج.

اترك رد

هذا الموقع يستخدم Akismet للحدّ من التعليقات المزعجة والغير مرغوبة. تعرّف على كيفية معالجة بيانات تعليقك.

زر الذهاب إلى الأعلى