FakeCall Android Trojan Evolves with New Evasion Tactics and Expanded Espionage Capabilities
The sophisticated vishing malware known as FakeCall (aka Fakecalls) has become more sophisticated. New research shows an increase in evasion and espionage capabilities for an Android malware that has been known and classified as a banking trojan largely targeting South Korea.
In addition to vishing (voice phishing), FakeCall could also capture live audio and video streams from the infected devices, allowing attackers to steal sensitive data without victim interaction.
Callie Guenther, senior manager of cyber threat research at Critical Start, told SecurityWeek, “The techniques used, such as native API utilization, advanced obfuscation, and remote surveillance, resemble TTPs seen in state-sponsored campaigns. Although not definitively attributed, these capabilities align with those observed in APT groups focused on espionage and high-value financial targeting.”
See more:
Security week:
Bleeping Comuper:
#cybersecurity #vishing
SecurityWeek
FakeCall Android Trojan Evolves with New Evasion Tactics and Expanded Espionage Capabilities
FakeCall Android banking trojan gained advanced evasion and surveillance features, posing increased threats via vishing and UI hijacking.
BleepingComputer
Android malware "FakeCall" now reroutes bank calls to attackers
A new version of the FakeCall malware for Android hijacks outgoing calls from a user to their bank, redirecting them to the attacker's phone n...
