Discover a new kind of malicious code that can record the phone call to extort money

Researchers discovered a new malware that appeared on Android in 53 applications on third-party stores including computational applications, photo editors, and disk management tools. It has the ability to steal data, record conversations and background noise to blackmail victims.

This malware - dubbed RedDrop. When the application is infected, malicious code will be granted to allow it to run even if the device restarts. Meanwhile, 7 malicious applications are different from spy functions, extracting data will also be downloaded more. Once a user starts using a malicious application, a SMS message is sent to a paid service to use the victim's money without being detected.

Discover a new kind of malicious code that can record the phone call to extort money Picture 1

RedDrop steals data types such as photos, IMEI and IMSI numbers, SIM card information, contact lists, nearby WiFi networks and recordings of sounds around the infected device and sends it to the Dropbox folder and developer Google Drive. He will use these data to extort money.

Researchers have discovered the malware for the first time on a Chinese server to entice victims to visit a domain containing sensitive content. But it is still unclear who is behind its development and distribution because he used more than 4,000 compromised domains to spread malicious applications.

Below is the screen shot shared by Wandera explaining the campaign using sensitive content to target victims.

Discover a new kind of malicious code that can record the phone call to extort money Picture 2
Discover a new kind of malicious code that can record the phone call to extort money Picture 3
Discover a new kind of malicious code that can record the phone call to extort money Picture 4
The process used by hackers to spread malicious code.(Photo: According to Wandera).

RedDrop is one of the most sophisticated Android malware that researchers have ever seen spread widely. Therefore, in order to protect safety and avoid the risk of malicious code, Android users should download the application from Google Play Store or only from trusted websites.

See more:

1. Detects two serious vulnerabilities on uTorrent that can help hackers execute malicious code or view download history on your computer
2. Warning: A new code of virtual money training is spreading strongly in Vietnam
3. Summary of effective Anti-Ransomware software
4. Veil: anonymous browser deletes all traces, safer than Tor
5. These are all the data about you that the websites you visit collect