Sometimes a version of malware doesn’t apply to us, yet it is interesting and important to know what is possible. The Russian security company, Kaspersky Lab has found one such bit of malware that exhibits functionality that has not been seen before this. The scary part of this is that these abilities can be used essentially to spy on anyone that has it installed on an Android device.
The spyware app, called Skygofree appears to have been in use since 2014. It can record audio, which is not new for spyware apps. However, this one can start recording audio once the device enters a particular location. Think James Bond. This can be planted on a target’s phone, so the information of the enemy can be recorded when they are in a certain location and sent back to M in MI6 headquarters.
To most, what to be concerned about isn’t that it’s likely to end up on your phone. It’s that the technology may be used for other malware. Skygofree can also steal conversations from apps such as WhatsApp, take pictures and videos, record geolocation coordinates, steal calendar information, and anything else stored on the device. None of this information is likely what any of us would volunteer to send to unauthorized parties. It can also allow total control over the device.
This “tool,” according to the Kaspersky researchers is “spread through web pages mimicking leading mobile network operators.” Again, this is likely sideloaded rather than retrieved from the Google Play Store for Android. Steer clear of doing this as it can lead to getting some unwanted items onto your smartphone or other device. The apps in the official app stores for any device go through additional security checks before being allowed into them. While being in the official stores won’t guarantee malware-free apps, the extra scrutiny is something that other locations may not do. In other words, the risk of executing malware, including spyware like this is higher when you sideload apps.
This product, according to the researchers, is likely used to spy on specific targets. While you may not be one of them, the social engineering involved is not different. In some way, people are convinced to install the malicious app. Make sure you research the programs you install on anything. Read the reviews, make sure the developers are reputable, and ask friends for recommendations before doing so. Don’t assume that if an app costs money, it’s free of malware. Often that is a way of tricking us into a false sense of security. That said, freebies often have malware too.
While it isn’t definitely known who or what group is responsible for this, researchers mention the Italian company that provides surveillance tools to governments, the Hacking Team. This company made news in 2015 when it was hacked and details about a zero-day exploit were released into the wild.
For banks and credit unions
Share this article with your members
Copy a ready-made summary and link for your newsletter, website or social posts.
