Researchers Warn Of Android Malware RedDrop

Security researchers warn of a new type of malware for Android phones called RedDrop. Hackers can not only steal a lot of information from the infected smartphone, sounds can be recorded and photos can be taken and Premium SMS messages can be sent.

Security company Wandera has researched the new malware and observes that RedDrop is now nestled in at least 53 Android apps. When such an infected app is opened, at least seven new APKs are installed in the background, each with malicious functions.

With the help of spyware, all kinds of information about the user is collected and then sent to a Dropbox account of the attacker. The data collected includes local files, such as photos, live sound recordings, device and SIM information (IMEI, IMSI, MNC, MCC) and information from the application and Wi-Fi networks in the area.

Also, if a user uses the infected app, a text message is sent to a payment service in the background, which is immediately removed to prevent discovery.

The creators of RedDrop use a content distribution network with more than 4000 domain names to distribute the malware. The researchers suspect that a lot is referred to domains to hide the source of the malware as well as possible.

Malware Infection Chain:

According to Michael Covington, VP Product Strategy at Wandera, this is very sophisticated malware . "The criminals very cleverly offer a seemingly handy app that performs all sorts of complex malicious activities in the background. The attacker not only uses a wide range of malicious applications to tempt the victim, they have also perfected every little detail to ensure that their actions are difficult to trace. This is one of the more persistent malware variants we've seen. "

Iran Bans Smartphones Officials For Spying

Fearing espionage going on the Iranian authorities prohibit the use of smartphones for work related matters by officials with confidential information. According to Brigadier General Gholamreza Jalali, these types of phones does not secure since the data is backed up on the device.

The new rule is still waiting for the last approval, but would mean that officials must use other phones for work where confidential information is involved. The ban would not apply to personal use as reported AFP. The measure follows reports that sophisticated malware called Duqu2 was used for nuclear talks with Iran was involved in spying.

The malware would be used at the hotels where the participants stayed at the talks. Because of the incident both the Austrian and Swiss authorities have started an investigation. However, not been the case according to the US government is the security around nuclear talks. "We have taken during the negotiations measures to ensure that confidential details and discussions behind closed doors continued," US spokesman Jeff Rathke said earlier during a press conference to know.