This new campaign of malware, dubbed GravityRAT, exfiltrates WhatsApp backups and sends commands to delete files.
It also uses legitimate chat functionality based on the open-source OMEMO Instant Messenger app.
ESET explains more about the malware in a paper published today.
GravityRAT is the name given to a cross-platform malware that’s capable of targeting Windows, Android, and macOS devices.
The chat apps in this particular campaign are distributed through rogue websites promoting free messaging services such as bingechat.
These are very specific commands that are not typically seen in Android malware, Štefanko pointed out.
More on this in the What’s New In This New Report segment of this article.
👋 Feeling the vibes?
Keep the good energy going by checking out my Amazon affiliate link for some cool finds! 🛍️
If not, consider contributing to my caffeine supply at Buy Me a Coffee ☕️.
Your clicks = cosmic support for more awesome content! 🚀🌈
Leave a Reply