Security researchers have discovered a new malware with capabilities spying and tracking Essentially, it is a spyware, which according to the data, is available in both versions Android and iOS. The spyware is called Goontact and has the ability to collect various data from infected devices, such as: phone IDs, contacts, SMS messages, photos and location information.
The new spyware was detected by security firm Lookout and, according to researchers, is distributed through third-party sites that promote free applications instant messaging.
These sites currently appear to be targeting Chinese-speaking countries, Lookout said in a report.
The malware has not yet reached the official Apple and Google, but there are indications that users have downloaded Android and iOS apps infected with the Goontact spyware.
The data collected by these applications is sent to online servers controlled by the operators of the Goontact spyware. Based on the language used for the administration panels of these servers, Lookout believes that the Goontact spyware campaign is likely the work of Chinese-speaking criminals.
Apurva Kumar, an executive at Lookout, told ZDNet that the Goontact operation closely resembles a sexual extortion campaignanalyzed by Trend Micro in 2018.
Although there is no concrete evidence at this time, Kumar believes that the data collected through the malicious apps could later be used to blackmail victims into paying small amounts of money or forcing them to do things related to sex.
“We have notified both Google and Apple of this threat and are working with them to protect all Android and iOS users from Goontact spyware,” Kumar said.
"Apple . has revoked the corporate certificates used to sign the apps, and as a result, the apps will stop working on the devices," the security expert added
“Also, Play Protect will notify the user if the Android version of Goontact is installed on their device“.
The applications infected by Goontact spyware are numerous, but you can find them at the end of Lookout's report.
Source: ZDNet
