This Thanksgiving, Deals On Your Private Data Too
ID: 7859c1b7-7612-5bd4-9be7-098ee14d113f
STIX ID: report--7859c1b7-7612-5bd4-9be7-098ee14d113f
Feed Name: Zscaler Security Research Blog
A fake Amazon Black Friday Android app (download URL: http://amazon.de.offer47263.cc/amazon.apk) installs a hidden, persistent child application named 'com.android.engine' that escalates to device administrator, harvests contacts, SMS, call logs and browser history, and exfiltrates data to a hardcoded C2 (198.50.169.251:4467); packet captures and screenshots in the report show active communication and data transfer. Users are advised to install apps only from legitimate stores and review requested permissions.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.