Tag

Gravityrat

All articles tagged with #gravityrat

cybersecurity2 years ago

Beware: Android Malware Stealing WhatsApp Backups and Chats

Android malware GravityRAT is spreading through a trojanized chat app called BingeChat, which steals data from victims' devices, including WhatsApp backup files. The spyware is spread through invite-based downloads and requests risky permissions upon installation, including access to contacts, location, phone, SMS, storage, call logs, camera, and microphone. GravityRAT's operators, SpaceCobra, use the spyware exclusively and in narrow targeting operations, with campaigns usually focused on India. All Android users should avoid downloading APKs from outside Google Play and be cautious with risky permission requests while installing any app.

mobile-security-privacy2 years ago

Beware: Android Malware Stealing WhatsApp Backups and Chats

GravityRAT, a cross-platform malware capable of targeting Windows, Android, and macOS devices, has been found masquerading as messaging apps BingeChat and Chatico in a narrowly targeted campaign since June 2022. The updated version of the Android remote access trojan can exfiltrate WhatsApp backups and receive commands to delete files. The threat actor is suspected to be based in Pakistan, with recent attacks involving GravityRAT targeting military personnel in India and among the Pakistan Air Force by camouflaging it as cloud storage and entertainment apps.