Popular on s4story
- Filipino Poet Wins First International Poetry Prize at London's Bermondsey Festival
- Experience Trembling Firsthand with the New AgeMan® Tremor Simulator
- TEDxInglewood Returns to The Miracle Theater on August 9, 2025 — Celebrating Bold Ideas and Community Energy
- Manhattan Boutique Real Estate Collaborates with InterContinental Hotels NYC in a Branding Partners Personalized Approach
- Kaplan Morrell Applauds Passage of Landmark Workers' Compensation Reform in Colorado
- "The Godfather's Vow" by Antonino Scalabrino is published
- Real Estate CEO Launches Explosive New Book After $275,784 Wire Fraud Incident
- Rediscovered Christopher Lee Recording 'Elenore' Re-Released to Mark 10th Anniversary of His Passing
- History Matters: Book Recommendations for June
- Lottery.com Inc. Secures $300 Million in Growth Capital, Confirms Nasdaq Compliance & Acquires UAE Sports Incubator Amid High-Profile Brand Exposure
Similar on s4story
- Digital Watchdog Launches New myDW Cloud Services
- Drone Light Shows Emerge as the New Standard in Live Event Entertainment
- Lore Link is Here to Help Organize Your Game
- AI Innovation Dual-Strategy Business Model Focused on Real Estate Development for Strategic Expansion: OFA Group, (N A S D A Q: OFAL)
- Retired Hobbyist Launches Bold Weekly Album Project Using AI Songwriting Tools
- Eolian Signs New Information Exchange Agreement with the U.S. Department of Defense for Technology Innovation
- Bio-Inspired Technology-Dynamic and Adaptable for unknown real-world environments
- $12.8 Million Net Revenue for 2024 for Cloud-Based Crowdsourcing Recruitment and SaaS-Enabled HR Solutions Provider: Baiya International Group Inc
- Hire Virtue Announces Executive Sponsorship Opportunity for Houston Hiring Blitz & Job Fair on August 6, 2025
- Plan to Launch Silo Technologies' Cybersecurity Pilot Program for Ultimate Nationwide Deployment via Exclusive Partnership: Stock Symbol: BULT
EclecticIQ and ThreatFabric investigation reveals evidence of malicious Android packages posing as legitimate Covid-19 contact tracing apps
S For Story/10432412
Threat actors exploit consumer trust in legitimate government apps to plant malicious packages
AMSTERDAM - s4story -- EclecticIQ, the global provider of cyber threat intelligence (CTI) technology solutions, has teamed up with fraud and cybercrime prevention experts at ThreatFabric to publish the findings of an investigation into instances of threat actors actively pushing malicious Android packages disguised as legitimate contact tracing applications.
Key analysis points by ThreatFabric and EclecticIQ reveal that:
The findings of the report suggest that threat actors will almost certainly continue to use commodity and open source-based malware disguised as legitimate contact tracing applications for financial gain. The low barrier to entry provided by these tools and the continued rollout of contact tracing applications by nations, presents continued financial opportunity for cybercriminals into the near future. Malicious actors have shown their willingness to exploit the current pandemic by targeting legitimate contact tracing applications consistently in recent months. Samples analyzed by EclecticIQ and ThreatFabric researchers had an earliest estimated build time of April 12th, 2020 with the latest being June 23rd, 2020.
More on S For Story
Peter Ferguson, Cyber Threat Intelligence Specialist at EclecticIQ's Fusion Center commented:
"Users should never download contact tracing android applications from links sent to them or from third party stores. If they are interested in downloading their nation's contact tracing application, they should use the official site or the Google Play Store."
Gaetan van Diemen, General Manager at ThreatFabric commented:
"Threat actors have become very efficient in tricking users into downloading and installing a phenomenal variety of malicious apps on their mobile devices. To avoid fraud and brand or reputation damage, we strongly recommend app developers and online service providers to adapt their security strategy based on the factual evolution of the mobile threat landscape."
Additional Resources:
About EclecticIQ
EclecticIQ enables intelligence-powered cybersecurity for government organizations and commercial enterprises. We develop analyst-centric products and services that align our clients' cyber security focus with their threat reality. The result is intelligence-led security, improved detection and prevention, and cost-efficient security investments.
Our solutions are built specifically for analysts across all intelligence-led security practices such as threat investigation and threat hunting, as well as incident response efforts. We tightly integrate our solutions with our customers' IT security controls and systems. EclecticIQ operates globally with offices in Europe, the United Kingdom and North America, and via certified value-add partners.
More on S For Story
Learn more at www.eclecticiq.com
About ThreatFabric
ThreatFabric helps financial institutions protect their online services, stop fraud and enhance customer experience. Powered by threat intelligence, ThreatFabric's solutions offer a holistic approach to risk detection and fraud prevention. MTI (Mobile Threat Intelligence) provides global visibility and context on the mobile banking threat landscape. It is the threat intelligence solution to use to protect personal data, customers and brand from financially motivated threat actors. It includes the strategic overview of threats and context as well as all relevant technical indicators. CSD (Client Side detection) provides the answer to the constantly-evolving fraud landscape and regulatory challenges. An omnichannel solution that empowers financial institutions to pro-actively detecting known and unknown threats to mitigate fraud and build trust across their online services.
Learn more at www.threatfabric.com
Key analysis points by ThreatFabric and EclecticIQ reveal that:
- Threat actors have been disguising Android packages as legitimate government-backed contact tracing applications for financial gain.
- There is evidence to suggest that actors have used repackaged commodity and open-source malware to lower the investment required in the observed campaigns.
- Third-party port forwarding, and secure tunneling services have probably been used to provide anonymization to command and control (C2) infrastructure.
- The Android packages were probably delivered through links pointing to phishing pages.
The findings of the report suggest that threat actors will almost certainly continue to use commodity and open source-based malware disguised as legitimate contact tracing applications for financial gain. The low barrier to entry provided by these tools and the continued rollout of contact tracing applications by nations, presents continued financial opportunity for cybercriminals into the near future. Malicious actors have shown their willingness to exploit the current pandemic by targeting legitimate contact tracing applications consistently in recent months. Samples analyzed by EclecticIQ and ThreatFabric researchers had an earliest estimated build time of April 12th, 2020 with the latest being June 23rd, 2020.
More on S For Story
- Lore Link is Here to Help Organize Your Game
- Groups Now Included in Basic Authors Training course
- Chappaqua's Annual Townwide Summer Sale – Unbeatable Savings at Your Favorite Local Boutiques!
- History Matters: Book Recommendations for July
- Skyline Partners with ZenSpace to Offer Private Meeting Pods for Trade Show Exhibitors
Peter Ferguson, Cyber Threat Intelligence Specialist at EclecticIQ's Fusion Center commented:
"Users should never download contact tracing android applications from links sent to them or from third party stores. If they are interested in downloading their nation's contact tracing application, they should use the official site or the Google Play Store."
Gaetan van Diemen, General Manager at ThreatFabric commented:
"Threat actors have become very efficient in tricking users into downloading and installing a phenomenal variety of malicious apps on their mobile devices. To avoid fraud and brand or reputation damage, we strongly recommend app developers and online service providers to adapt their security strategy based on the factual evolution of the mobile threat landscape."
Additional Resources:
- Read full report here
About EclecticIQ
EclecticIQ enables intelligence-powered cybersecurity for government organizations and commercial enterprises. We develop analyst-centric products and services that align our clients' cyber security focus with their threat reality. The result is intelligence-led security, improved detection and prevention, and cost-efficient security investments.
Our solutions are built specifically for analysts across all intelligence-led security practices such as threat investigation and threat hunting, as well as incident response efforts. We tightly integrate our solutions with our customers' IT security controls and systems. EclecticIQ operates globally with offices in Europe, the United Kingdom and North America, and via certified value-add partners.
More on S For Story
- Powerful Stories and Shared Sisterhood Shine at "An Evening with the Author" Featuring Staci Kirk
- AI Innovation Dual-Strategy Business Model Focused on Real Estate Development for Strategic Expansion: OFA Group, (N A S D A Q: OFAL)
- Construcción del Corredor Norte–Sur (NSC) de Singapur
- New Report: Slip and Fall Accidents Rank as the Leading Cause of Construction Site Fatalities
- Get Your Cowboy Boots On! Causeway Country BBQ Music Festival Kicks Off September 12–14 in Ft. Pierce
Learn more at www.eclecticiq.com
About ThreatFabric
ThreatFabric helps financial institutions protect their online services, stop fraud and enhance customer experience. Powered by threat intelligence, ThreatFabric's solutions offer a holistic approach to risk detection and fraud prevention. MTI (Mobile Threat Intelligence) provides global visibility and context on the mobile banking threat landscape. It is the threat intelligence solution to use to protect personal data, customers and brand from financially motivated threat actors. It includes the strategic overview of threats and context as well as all relevant technical indicators. CSD (Client Side detection) provides the answer to the constantly-evolving fraud landscape and regulatory challenges. An omnichannel solution that empowers financial institutions to pro-actively detecting known and unknown threats to mitigate fraud and build trust across their online services.
Learn more at www.threatfabric.com
Source: EclecticIQ
0 Comments
Latest on S For Story
- Hire Virtue Announces Executive Sponsorship Opportunity for Houston Hiring Blitz & Job Fair on August 6, 2025
- Industry Insider Unveils Groundbreaking Car Buying Guide for First-Time Buyers:
- Inked & Maxim Model Teisha Mechetti Turns Heads—And Builds Community Impact
- Twentieth Century Publications Helps Authors Turn Ideas Into Published Success Stories
- Award-Winning Author Debuts New E-Book
- Authors Release Personal Accounts of the McClure #1 Mine Explosion in VA
- Plan to Launch Silo Technologies' Cybersecurity Pilot Program for Ultimate Nationwide Deployment via Exclusive Partnership: Stock Symbol: BULT
- Robert Michael & Co. Real Estate Team Celebrates Industry Recognition and Showcases Premier Central Florida Listings
- NEW CHILDREN'S BOOK RELEASE: "Mommy, Where Is My Daddy?" by Tracy L. Gray
- AI-Based Neurotoxin Countermeasure Initiative Launched to Address Emerging National Security Needs: Renovaro, Inc. (N A S D A Q: RENB)
- The Naturist World Just Shifted — NaturismRE Ignites a Global Resurgence
- Mental and Emotional Self-Management, Practical Tools for Trauma-Informed Stress Management
- $796,000 in Q2 Revenue Marks Highest Earnings to Date on 3 Trailing Quarters of Profitability in Multi-Billion Homebuilding Sector: Stock Symbol: IVDN
- Cybersecurity is THE Hot Market Sector; Revenues, Earnings & Profit matter; Only 33 Million Shares + a Huge Short Position Equal an Undervalued Stock
- Despite Global Calls for a Ban, US Child Psychiatry Pushes Electroshock for Kids
- Franco Polished Plaster Celebrates 35 Years of Bringing Walls to Life in the UK
- Spartan & Guardians Partner with Guitar Legend Buckethead to Support Global Child Rescue Efforts
- New Poetry Collection What The Heart Carries Offers a Lifeline to the Grieving—Already Garnering Viral Praise
- A Novel-in-verse Journey To Offer Hope In The Wake Of The Climate Crisis
- Preliminary.online Introduces Short-Term Job-Readiness Courses with Employer-Verified Certifications