l
itMYti.com < New IT WebNews

Category: news    |    Added: 2018-05-20 19:10:09    |    View: 23

The Google Play store is no stranger to seemingly legitimate apps that host malware, but McAfee researchers have discovered something a bit different: three malicious applications that target specific individuals. The security group says a North Korea-linked group uploaded the apps, which were designed to infiltrate Android devices belonging to defectors from the country.

While the phrase “North Korean hackers” usually refers to the notorious Lazarus Group, in this instance the attacker is the Sun Team. It was behind a campaign called RedDawn, which saw malware-loaded apps added to the Play Store before attempts were made at convincing defectors to download the software.

The three apps appeared in Google’s store between January and March this year. The first of these, called Food Ingredients Info, offered information on food, as one might imagine. The other two—Fast AppLock and Fast AppLockFree—were security tools. All three were able to steal the personal data of those who downloaded them, which could then be used to blackmail, threaten, or track victims; this information included a user’s photos, contacts, call recordings, and SMS messages.

"After infecting a device, the malware uses Dropbox and Yandex to upload data and issue commands, including additional plug-in dex files; this is a similar tactic to earlier Sun Team attacks,” writes McAfee’s Jaewon Min.

"From these cloud storage sites, we found information logs from the same test Android devices that Sun Team used for the malware campaign we reported in January. The logs had a similar format and used the same abbreviations for fields as in other Sun Team logs. Furthermore, the email addresses of the new malware's developer are identical to the earlier email addresses associated with the Sun Team."

The Sun Team tried to get North Korean defectors, of which there were over 30,000 in 2016, to download the apps by using a fake Facebook profile or sending direct private messages via the site. A chat app popular in South Korea called KakaoTalk was also used to send links to the targets.

The apps, which have now been removed, recorded around 100 downloads during their time on the Google Play Store. Two fake Facebook profiles set up by the Sun Team are reportedly still active.

Further evidence linking the attacks to North Korea included an IP address belonging to the country that was found in a test log file, along with the fact that the authors used Korean words “not in South Korean vocabulary.” With North Korea threatening to halt its recent peace talks, we could see more attacks from the Sun Team in the future.

Share this article:
source: Techspot
Category: review    |    6 hours ago    |    View: 113

What's the best VPN for your Mac? Here are the top recommendations based on our testing.

Category: news    |    6 hours ago    |    View: 1

Google has always prided itself on its free services. Gmail, Google Docs, and YouTube are all technically free to the public. However, that's about to change ever so slightly for European Android device makers.

Category: news    |    6 hours ago    |    View: 1

Netflix shares shot up more than 12 percent in after-hours trading on Tuesday following the release of its favorable third-quarter earnings report.

Category: news    |    7 hours ago    |    View: 9

They were led to the impromptu grave site by a GPS system they had found in stepfather Wesley Hadsell’s van. Also found in the vehicle were a dirty shovel, gloves, and duct tape. The evidence was circumstantial but was enough&hellip;

Category: news    |    8 hours ago    |    View: 5

Winamp, the standalone music player synonymous with late 90s computing, is making a comeback.

Category: news    |    9 hours ago    |    View: 56

Amazon on Tuesday introduced a reimagined version of its popular Kindle Paperwhite e-reader featuring a waterproof design and twice the storage of its predecessor.

Category: news    |    9 hours ago    |    View: 0

If you kept up on tech news during 2017, you probably remember that many outlets -- us included -- covered the "death" of net neutrality in December, when the Federal Communications Commission (FCC) led by Chairman Ajit Pai controversially voted&hellip;

Category: news    |    10 hours ago    |    View: 145

Last Saturday VG24/7 reported that a malicious PlayStation 4 messaging bug had been discovered and was “bricking consoles.” It urged users to change their privacy settings to either Friends or No One for messages until Sony could fix the problem.

Category: news    |    11 hours ago    |    View: 78

Facebook is developing a camera-equipped device under the codename Ripley that’s part webcam, part set-top box.

Category: news    |    11 hours ago    |    View: 0

We've known Discord has been gunning for Steam for several months now. The creators of the popular gaming-focused communications app announced their own in-app game storefront back in August.




Download Latest PC Softwares

Category: converters    |    Added: 19 hours ago    |    View: 16
Acme CAD Converter 2019 Free Download - downloadwise.com

Acme CAD Converter 2019 Free Download Latest Version for Windows. It is full offline installer standalone setup of Acme CAD Converter 2019.

 

Category: complex-processing    |    Added: 19 hours ago    |    View: 1
MAXQDA Analytics Pro 2018 Free Download - downloadwise.com

MAXQDA Analytics Pro 2018 Free Download Latest Version. It is full offline installer standalone setup of MAXQDA Analytics Pro 2018.

 

Category: bentley-openroads-designer-connect-edition-2018-free-download    |    Added: 19 hours ago    |    View: 1
Bentley OpenRoads Designer CONNECT Edition 2018 Free Download - downloadwise.com

Bentley OpenRoads Designer CONNECT Edition 2018 Free Download. It is full offline installer standalone setup of Bentley OpenRoads Designer.

Bentley OpenRoads Designer CONNECT Edition 2018 Free Download
OpenRoads Designer , the name of the software engineering and specialized in the field of road construction. The software is known to you as one of the most powerful software in the field. Using this software, users will be able to design advanced design concepts. The benefit of this software comes from countless capabilities, along with a plethora of tools that help you to no longer use other software and will actually need you out of any other tool.

Category: sweet-home-3d-6-free-download    |    Added: 19 hours ago    |    View: 1
Sweet Home 3D 6 Free Download - downloadwise.com

Sweet Home 3D 6 Free Download Latest Version for Windows. It is full offline installer standalone setup of Sweet Home 3D 6.

 

Category: scrivener-1-9-9-0-free-download    |    Added: 19 hours ago    |    View: 1
Scrivener 1.9.9.0 Free Download - downloadwise.com

Scrivener 1.9.9.0 Free Download Latest Version for Windows. It is full offline installer standalone setup of Scrivener 1.9.9.0.

 

Category: autoform-plus-r7-free-download    |    Added: 19 hours ago    |    View: 0
AutoForm Plus R7 Free Download - downloadwise.com

AutoForm Plus R7 Free Download Latest Version for Windows. It is full offline installer standalone setup of AutoForm Plus R7.

AutoForm Plus R7 Free Download

Category: trimble-tilos-v10-1-free-download    |    Added: 22 hours ago    |    View: 3
Trimble TILOS v10.1 Free Download - downloadwise.com

Trimble TILOS v10.1 Free Download Latest Version for Windows. It is full offline installer standalone setup of Trimble TILOS v10.1.