cyber threat A technical report prepared by intelligence experts has revealed Android malware called FireScam. This software steals users’ sensitive data, including their notifications, and uses advanced cloaking techniques to avoid detection. FireScam masquerades as a fake Telegram Premium app and is distributed via a fake RuStore App Store website in an attempt to trick users. This fake website is specifically designed to look like a popular app store in the Russian Federation. However, experts warn that attackers may also operate in different regions and distribution channels.
FireScam leverages the advanced techniques of today’s malware. It works with a multi-stage attack process; In the first stage, it infects devices using a dropper, followed by data theft and monitoring of activities on the device. Trying to hide by using legitimate services such as Firebase FireScamnot only steals data but also creates a permanent control mechanism over the device.
The findings highlighted in the report show that FireScam monitors screen status changes, e-commerce transactions, clipboard activities and user interactions on the device. Moreover system applications It collects notifications from many different applications, including. This malware exfiltrates user messages and app data through a Firebase real-time database.
Researchers such of malwarestates that it poses a serious threat to individuals and institutions through popular messaging applications and widely used services. It is emphasized that users should be careful about downloading applications, especially from well-known stores, and be alert to fake application stores. The FireScam example once again reveals how sophisticated and dangerous modern malware has become.
This news our mobile application Download using
You can read it whenever you want (even offline):