'SonicSpy' Android spyware found in Play Store


San Francisco, Aug 14 (IANS): Researchers at security company, Lookout, have identified a family of malware, referred to as 'SonicSpy' on Google Play Store, that can remotely control infected Android smartphones, the media reported.

The samples of 'SonicSpy' most recently found on the Play Store, called 'Soniac', is marketed as a messaging app, the researchers said on Sunday. It has infected more than 1,000 additional apps hosted at third-party Android app stores.

The malware gives attackers control over the device and allows them to silently record audio, make calls, retrieve call logs, contacts and take photographs, the company said in a blogpost.

While 'Soniac' does provide this functionality through a customised version of the communications app 'Telegram', it also contains malicious capabilities that provide an attacker with significant control over a target device. 

The infected applications that entered Google Play Store are 'Troy Chat', 'Hulk Messenger' and 'Soniac Messenger'.

The company said the analysed samples contained similarities to 'SpyNote', a malware family that was first reported in 2016.

Using Android applications to spread malware is becoming common these days.

A new batch of spyware named 'Lipizzan' that could capture users' text messages, voice calls, location data and photos was discovered and blocked by Google in July.

Google, in a blog post, said it discovered a new family of Android spyware while investigating another spyware named 'Chrysaor'. 

'Lipizzan' spyware was capapable of performing tasks that include taking screenshots, taking pictures with the device camera, recording from the device's microphone, call recording and location monitoring. 

  

Top Stories


Leave a Comment

Title: 'SonicSpy' Android spyware found in Play Store



You have 2000 characters left.

Disclaimer:

Please write your correct name and email address. Kindly do not post any personal, abusive, defamatory, infringing, obscene, indecent, discriminatory or unlawful or similar comments. Daijiworld.com will not be responsible for any defamatory message posted under this article.

Please note that sending false messages to insult, defame, intimidate, mislead or deceive people or to intentionally cause public disorder is punishable under law. It is obligatory on Daijiworld to provide the IP address and other details of senders of such comments, to the authority concerned upon request.

Hence, sending offensive comments using daijiworld will be purely at your own risk, and in no way will Daijiworld.com be held responsible.