InfoSecBulletin Cybersecurity for mankind
Zimperium’s zLabs found a new threat called SMS Stealer. It has been found in over 105,000 samples and affects more than 600 global brands. SMS Stealer poses risks like account takeovers and identity theft.
SMS stealer:
The SMS Stealer threat was discovered in 2022. It tricks victims by using fake ads and Telegram bots that pretend to be real services. By gaining access to their SMS messages, the malware then connects to one of its 13 Command and Control servers. It confirms its status and sends stolen SMS messages, including one-time passwords (OTPs).
WhatsApp banned on all US House of Representatives devices
Kaspersky found “SparkKitty” Malware on Google Play, Apple App Store
OWASP AI Testing Guide Launched to Uncover Vulns in AI Systems
Axentec Launches Bangladesh’s First Locally Hosted Tier-4 Cloud Platform
Hackers Bypass Gmail MFA With App-Specific Password Reuse
Russia detects first SuperCard malware attacks via NFC
Income Property Investments exposes 170,000+ Individuals record
ALERT (CVE: 2023-28771)
Zyxel Firewalls Under Attack via CVE-2023-28771 by 244 IPs
CISA Flags Active Exploits in Apple iOS and TP-Link Routers
10K Records Allegedly from Mac Cloud Provider’s Customers Leaked Online
OTPs add extra security to online accounts, especially for businesses that control access to sensitive data. However, the SMS Stealer can intercept OTPs, allowing attackers to take control of victims’ accounts. The associated malware stays hidden, enabling continuous attacks.
SMS Stealer impact:
Credential theft: The malware can intercept and steal login credentials.
Malware infiltration: Attackers can use stolen credentials to access systems and install more malware, making the attack more serious.
Ransomware attacks: Stolen access can be used to launch ransomware attacks, which encrypt data and demand money for recovery. Attackers can also cause financial loss by making unauthorized charges, creating fraudulent accounts, and committing theft and fraud.
“The SMS Stealer represents a significant evolution in mobile threats, highlighting the critical need for robust security measures and vigilant monitoring of application permissions,” said Nico Chiaraviglio, Chief Scientist at Zimperium. “As threat actors continue to innovate, the mobile security community must adapt and respond to these challenges to protect user identities and maintain the integrity of digital services.”
