InfoSecBulletin Cybersecurity for mankind
Zimperium’s zLabs found a new threat called SMS Stealer. It has been found in over 105,000 samples and affects more than 600 global brands. SMS Stealer poses risks like account takeovers and identity theft.
SMS stealer:
The SMS Stealer threat was discovered in 2022. It tricks victims by using fake ads and Telegram bots that pretend to be real services. By gaining access to their SMS messages, the malware then connects to one of its 13 Command and Control servers. It confirms its status and sends stolen SMS messages, including one-time passwords (OTPs).
Check Point said BreachForum post old data
Apple Warns of 3 Zero Day Vulns Actively Exploited
24,000 unique IP attempted to access Palo Alto GlobalProtect portals
CVE-2025-1268
Patch urgently! Canon Fixes Critical Printer Driver Flaw
Within Minute, RamiGPT To Escalate Privilege Gaining Root Access
Australian fintech database exposed in 27000 records
Over 200 Million Info Leaked Online Allegedly Belonging to X
FBI investigating cyberattack at Oracle, Bloomberg News reports
OpenAI Offering $100K Bounties for Critical Vulns
Splunk Alert User RCE and Data Leak Vulns
OTPs add extra security to online accounts, especially for businesses that control access to sensitive data. However, the SMS Stealer can intercept OTPs, allowing attackers to take control of victims’ accounts. The associated malware stays hidden, enabling continuous attacks.
SMS Stealer impact:
Credential theft: The malware can intercept and steal login credentials.
Malware infiltration: Attackers can use stolen credentials to access systems and install more malware, making the attack more serious.
Ransomware attacks: Stolen access can be used to launch ransomware attacks, which encrypt data and demand money for recovery. Attackers can also cause financial loss by making unauthorized charges, creating fraudulent accounts, and committing theft and fraud.
“The SMS Stealer represents a significant evolution in mobile threats, highlighting the critical need for robust security measures and vigilant monitoring of application permissions,” said Nico Chiaraviglio, Chief Scientist at Zimperium. “As threat actors continue to innovate, the mobile security community must adapt and respond to these challenges to protect user identities and maintain the integrity of digital services.”
