In the background, however, the malicious app is attempting to download a payload using FCM.
Once the message of uninstallation is shown, the icon is removed from the user interface. This is often a lure to make the victim believe that there was no malicious install, researchers said. Once the app, which purports to be a chat platform is downloaded and opened, users receive a message that chats are continually loading, the application is not supported, and uninstallation is ongoing (as shown in the sequence below). The filename of those Android applications (kashmir_sample.apk or Kashmir_Voice_v4.8.apk) shows continued interest in India, Pakistan, and the Kashmir crisis. Users are tempted to install a malicious app on their mobile device, likely done via direct messages that utilize social engineering, researchers said.
0 kommentar(er)
