Coronavirus Scam Alert: COVID-19 Map Malware Can Spy On You Through Your Android Microphone And Cam

[undercover JIX]

Coronavirus Scam Alert: COVID-19 Map Malware Can Spy On You Through Your Android Microphone And Camera

Thomas BrewsterForbes Staff
Cybersecurity
Associate editor at Forbes, covering cybercrime, privacy, security and surveillance.

• find by researchers at cybersecurity company Lookout is the latest in an avalanche of digital threats piggybacking on the coronavirus pandemic. It’s unclear how this latest strain of malware is propagating (it’s not on Google Play, for instance), but it’s disguised itself as a version of the legitimate “corona live” application, which provides data from the Johns Hopkins coronavirus tracker of infection rates and deaths.
  
  Read more: An Unprecedented Wave of Coronavirus Scams Is Coming, Warns US Prosecutor
  
  Today In: Cybersecurity
  Underneath the disguise, though, is a customized version of SpyMax, commercial spyware that can be acquired online by anyone with an internet connection for free. In this case, Lookout researcher Kristin Del Rosso has associated the malware with another 30 rogue Android applications that use the same command and control infrastructure of a larger surveillance campaign that’s been active since at least April 2019. Amongst those other 30 apps were fake tools claiming to be media players and, intriguingly, a tool that let a user search for the customer name of a Libyan mobile number.
  
  Lookout researchers have no evidence the perpetrators of this Android malware are backed by a nation-state, but noted “the use of these commercial surveillanceware families has been observed in the past as part of the tooling used by nation-states in the Middle East.”
  
  PROMOTED
  
  Grads of Life BRANDVOICE
  | Paid Program
  3 Ways To Manage The Pressure Of Hiring Right Now
  Civic Nation BRANDVOICE
  | Paid Program
  Eliminating Financial Aid Questions During Questionable Times
  UNICEF USA BRANDVOICE
  | Paid Program
  Helping Children Adjust To Remote Learning During The COVID-19 Pandemic
  Del Rosso told Forbes that amongst all the current COVID-19-themed threats facing smartphones, “on the mobile front, this appears to be the most privacy-invasive malware I've seen yet.” It works on all Android phones from Gingerbread (2.3.3) up to current devices.
  
  As for where to look out for this kind of threat, Del Rosso added: “Typically, malware like this is spread via links in SMS or from a watering hole website the actor sets up, where the application is available for download.”
  
  Previously, ransomware copied the COVID-19-tracking app and demanded Android users pay up to unlock their phone.
  
  Forbes has been keeping an eye on all the coronavirus-themed online threats out there, which you can find here.
  

https://www.forbes.com/sites/thomas...r-android-microphone-and-camera/#49a9bef675fd