Windows Spyware WinSpy and GimmeRAT monitors Android devices

If you are using Android Phone and syncing with the Windows Operating System for backup and transferring files, Then Be Careful.

Mechanism of attack on financial institution employing WinSpy

Researchers have found by analysis of an attack on a U.S. financial institution Windows spyware that is also able to monitor. Android devices The institution was attacked by a spear phishing email, which had a large NSIS file as an attachment.

Once the file was opened, the recipient was a picture of a payslip to see while installed in the background. WinSpy This is commercially available Windows-spyware which makes it possible to monitor, according to the authors. Computers but also Android devices In a second attack on the institution was again used WinSpy, only the malware was now hiding in an Excel document with a macro.

Once the malware on your computer is active, the attacker can control the webcam, capture screenshots, saving keystrokes, disable security software, downloading and surfing habits chat conversations via the microphone shoot, upload and download files and send messages to the computer.

Android

During the analysis of the malware security company FireEye also discovered various Android components that can be used to monitor the victim. It involves three different applications, one of which only works when the device is connected to the Windows computer while the other two make it possible to control. Android device via SMS

Deployment Scenarios for Android Components

To install the Android spyware must be connected, then the installation takes place. On the infected computer Windows phone Through the Android spyware screenshots can be stolen and it is possible to find out. The location of the target

"These attacks and tools to confirm that we live in an age of digital surveillance and theft of intellectual property. Commercial Remote Administration Tools (RATs) continue to proliferate and are increasingly being used by attackers," said analyst Thoufique Haq. He notes that the rise of mobile platforms like Android, a new market has emerged which also asked about RATs that support these platforms.

NSA wants to infect millions of computers with malware

According to The Intercept leaked documents obtained from Edward Snowden at the U.S. National Security Agency (NSA) has plans to spread malicious software to control millions of computers.

"Sometimes NSA disguised as Facebook server, using it to infect the target computer, stealing files from the hard drive, while at other times, NSA will send spam containing malware, malicious software through a computer microphone recording, but also take a snapshot camera with a computer ", The Intercept's Ryan Gallagher and Glenn Greenwald explained road.

Documents show that the NSA program was confined to infect a network of hundreds of targets, but soon expanded to a larger scale in order to hunt down the suspects.

The Intercept, said: "NSA began 10 years ago, the ability to rapidly increase its invasion of confidential internal records show that in 2004, NSA will manage one of only 100 units to 150 units implanted malware computer network.."

"But in the next six years to eight years, called specific invasion TAO (Tailored Access Operations) elite troops recruited new hackers, and the development of new malware tools, implanted a surge in the number of computer malware to tens of thousands of units. "

And Edward Snowden most leaked files, we do not know how the impact of this project, and whether they have been stopped. It just let us know, NSA on monitoring the Internet has done anything.

Intelligence agencies have long believed that the encryption technology is a threat to national security. Since the beginning of the 1990s , they actively lobbied backdoor access to people from developing computer tools. And recently, they seek to undermine international security standards , in order to hunt down the suspects. However, security experts worry that weaker standards make the Internet becomes more fragile when subjected to attacks by malicious users.

"As long as the backbone infrastructure to open the back door, software and security engineer for me it was horrible," the University of Pennsylvania professor Matt Blaze in an interview with The Intercept interview, said: "Do not think you want to achieve the goal of our NSA. how do you know it will work properly know how it would be confined to the target NSA want to investigate it "