AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |
Back to Blog
Instal the last version for android Joker11/16/2023 It also checks for the SIM provider’s country code. 5), which collects received SMS data.įig. mp3 file, which contains code for notification access (Ref. This payload is nothing but malicious joker malware. Then this payload further downloads the next payload from the link – “h**p://skullalioss-me-east /realease.mp3”. 3 This application has link “h**p://bitly/3hT17RL”. The first payload is downloaded from a Bitly short URL link, which is present in the original application from Google Play Store. After that, it is working like a document scanner application without showing any visible malicious activity to the user.īut in the background, it downloads two payloads, one after the other. This application takes SMS data from notifications, asks for Contacts access, and makes and manages phone call permission. Let’s see the working of one of the applications-Īt launch, this application asks for notification access, which is used to get notification data. In January, we have reported similar samples to Google and published a blog on the same. Then, it silently interacts with advertisement websites and subscribes the victim to premium services without their knowledge. Joker is a spyware Trojan that steals the victim’s device like SMS messages, contact list, and device info. 1 Screenshots of Applications from Google Play Store Quick Heal Security Labs recently spotted 8 Joker malware on Google Play Store and reported them to Google, which has now removed all the applications.įig. For the last three years, Joker Trojan is making its way on Google Play Store.
0 Comments
Read More
Leave a Reply. |