Ghostctrl: new malware detected on android
Table of contents:
Android is the operating system most used and most attacked by various malware. And today, it's time to talk about a new one. It is GhostCtrl, a remote access Trojan that has already been detected in a series of computer attacks in Israel.
GhostCtrl: New malware detected on Android
Apparently, this malware was originally created for Windows although it has been reconverted to attack Android devices now. It was detected at the beginning of the year in various attacks carried out against Windows. Now, it works on Android devices and is possibly one of the most powerful threats detected in quite some time.
How GhostCtrl Works
It carries out a series of malicious actions that put users' safety at risk. Here is the complete list of actions that this GhostCtrl carries out:
- Allows to record audio and video of infected devices Has complete control over calls and SMS Installs and opens applications (possibly also malicious) Roots the infected device Receives orders from a remote C&C server Uploads and downloads files from its C&C server It takes control about Bluetooth and Wi-Fi
It is one of the most powerful malware that has been seen against Android devices in a long time. But apparently it also acts as ransomware and can hijack the phone. And a ransom of up to $ 75 is requested in some cases.
GhostCtrl, as its name suggests, acts like a ghost, making it almost impossible for an antivirus to detect it. The main recommendation is to have our Android device updated at all times and control the permissions of the applications. Ideally, restrict them to a minimum, if possible.
Malware that affects detected mac
Malware that affects Mac detected. DOK is a new virus that is only affecting Mac computers. Find out how it works here.
Cookieminer detected, new malware for mac%%
CookieMiner detected, new malware for Mac with the aim of stealing information from accounts related to cryptocurrencies
Android malware detected that encrypts files and changes the pin
Android malware detected that encrypts files and changes the PIN. Find out more about DoubleLocker and its dangers.