One Article Review
| Source |  TrendLabs Security |
|---|---|
| Identifiant | 459759 |
| Date de publication | 2018-01-18 08:03:55 (vue: 2018-01-18 08:03:55) |
| Titre | GhostTeam Adware can Steal Facebook Credentials |
| Texte | We uncovered a total of 53 apps on Google Play that can steal Facebook accounts and surreptitiously push ads. Many of these apps, which were published as early as April 2017, seemed to have been put out on Google Play in a wave. Detected by Trend Micro as ANDROIDOS_GHOSTTEAM, many of the samples we analyzed are in Vietnamese, including their descriptions on Google Play. Their command-and-control (C&C) server points to mspace[.]com[.]vn. This, along with the considerable use of Vietnamese language, may indicate that the apps were from Vietnam. For instance, GhostTeam's configurations are in English and Vietnamese. English will be the default language if the malware detects the geolocation to be outside Vietnam. Post from: Trendlabs Security Intelligence Blog - by Trend Micro GhostTeam Adware can Steal Facebook Credentials |
| Notes | |
| Envoyé | Oui |
| Condensat | 2017 accounts ads adware along analyzed androidos apps april are been blog c&c can com command configurations considerable control credentials default descriptions detected detects early english facebook from from: geolocation ghostteam google have including indicate instance intelligence language malware many may micro mspace out outside play points post published push put samples security seemed server steal surreptitiously these total trend trendlabs uncovered use vietnam vietnamese wave which will |
| Tags | |
| Stories | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.