Trending...
- Chicago: Mayor Brandon Johnson Celebrates 10-Year Anniversary Of Dyett High School Hunger Strike
- "Leading From Day One: The Essential Guide for New Supervisors" Draws from 25+ Years of International Management Experience
- Prostate Cancer Survivor's Podcast Grows Audience And Builds Marketing Muscle
Threat actors exploit consumer trust in legitimate government apps to plant malicious packages
AMSTERDAM - illiNews -- EclecticIQ, the global provider of cyber threat intelligence (CTI) technology solutions, has teamed up with fraud and cybercrime prevention experts at ThreatFabric to publish the findings of an investigation into instances of threat actors actively pushing malicious Android packages disguised as legitimate contact tracing applications.
Key analysis points by ThreatFabric and EclecticIQ reveal that:
The findings of the report suggest that threat actors will almost certainly continue to use commodity and open source-based malware disguised as legitimate contact tracing applications for financial gain. The low barrier to entry provided by these tools and the continued rollout of contact tracing applications by nations, presents continued financial opportunity for cybercriminals into the near future. Malicious actors have shown their willingness to exploit the current pandemic by targeting legitimate contact tracing applications consistently in recent months. Samples analyzed by EclecticIQ and ThreatFabric researchers had an earliest estimated build time of April 12th, 2020 with the latest being June 23rd, 2020.
More on illi News
Peter Ferguson, Cyber Threat Intelligence Specialist at EclecticIQ's Fusion Center commented:
"Users should never download contact tracing android applications from links sent to them or from third party stores. If they are interested in downloading their nation's contact tracing application, they should use the official site or the Google Play Store."
Gaetan van Diemen, General Manager at ThreatFabric commented:
"Threat actors have become very efficient in tricking users into downloading and installing a phenomenal variety of malicious apps on their mobile devices. To avoid fraud and brand or reputation damage, we strongly recommend app developers and online service providers to adapt their security strategy based on the factual evolution of the mobile threat landscape."
Additional Resources:
About EclecticIQ
EclecticIQ enables intelligence-powered cybersecurity for government organizations and commercial enterprises. We develop analyst-centric products and services that align our clients' cyber security focus with their threat reality. The result is intelligence-led security, improved detection and prevention, and cost-efficient security investments.
Our solutions are built specifically for analysts across all intelligence-led security practices such as threat investigation and threat hunting, as well as incident response efforts. We tightly integrate our solutions with our customers' IT security controls and systems. EclecticIQ operates globally with offices in Europe, the United Kingdom and North America, and via certified value-add partners.
More on illi News
Learn more at www.eclecticiq.com
About ThreatFabric
ThreatFabric helps financial institutions protect their online services, stop fraud and enhance customer experience. Powered by threat intelligence, ThreatFabric's solutions offer a holistic approach to risk detection and fraud prevention. MTI (Mobile Threat Intelligence) provides global visibility and context on the mobile banking threat landscape. It is the threat intelligence solution to use to protect personal data, customers and brand from financially motivated threat actors. It includes the strategic overview of threats and context as well as all relevant technical indicators. CSD (Client Side detection) provides the answer to the constantly-evolving fraud landscape and regulatory challenges. An omnichannel solution that empowers financial institutions to pro-actively detecting known and unknown threats to mitigate fraud and build trust across their online services.
Learn more at www.threatfabric.com
Key analysis points by ThreatFabric and EclecticIQ reveal that:
- Threat actors have been disguising Android packages as legitimate government-backed contact tracing applications for financial gain.
- There is evidence to suggest that actors have used repackaged commodity and open-source malware to lower the investment required in the observed campaigns.
- Third-party port forwarding, and secure tunneling services have probably been used to provide anonymization to command and control (C2) infrastructure.
- The Android packages were probably delivered through links pointing to phishing pages.
The findings of the report suggest that threat actors will almost certainly continue to use commodity and open source-based malware disguised as legitimate contact tracing applications for financial gain. The low barrier to entry provided by these tools and the continued rollout of contact tracing applications by nations, presents continued financial opportunity for cybercriminals into the near future. Malicious actors have shown their willingness to exploit the current pandemic by targeting legitimate contact tracing applications consistently in recent months. Samples analyzed by EclecticIQ and ThreatFabric researchers had an earliest estimated build time of April 12th, 2020 with the latest being June 23rd, 2020.
More on illi News
- Cars.com Names Top EV Picks as Nearly 50% of Shoppers Accelerate Purchases Ahead of Federal EV Tax Credit Expiration Sept. 30 USA - English USA - English
- Open Art Call | The Art of Artificial Intelligence | Copenhagen
- Premieres of 10th Annual NY Dog Film Festival & 8th Annual NY Cat Film Festival on Sunday, October 26, 2025 to Benefit Animal Lighthouse Rescue
- $20 Price Target in Noble Capital Research Report as Deal is Signed for NFL Yearbook Advertising Across 25 Stadiums for AI Powered Sports Leader $SEGG
- 3E Launches First AI Agent Designed to Respond with Empathy for College Recruitment
Peter Ferguson, Cyber Threat Intelligence Specialist at EclecticIQ's Fusion Center commented:
"Users should never download contact tracing android applications from links sent to them or from third party stores. If they are interested in downloading their nation's contact tracing application, they should use the official site or the Google Play Store."
Gaetan van Diemen, General Manager at ThreatFabric commented:
"Threat actors have become very efficient in tricking users into downloading and installing a phenomenal variety of malicious apps on their mobile devices. To avoid fraud and brand or reputation damage, we strongly recommend app developers and online service providers to adapt their security strategy based on the factual evolution of the mobile threat landscape."
Additional Resources:
- Read full report here
About EclecticIQ
EclecticIQ enables intelligence-powered cybersecurity for government organizations and commercial enterprises. We develop analyst-centric products and services that align our clients' cyber security focus with their threat reality. The result is intelligence-led security, improved detection and prevention, and cost-efficient security investments.
Our solutions are built specifically for analysts across all intelligence-led security practices such as threat investigation and threat hunting, as well as incident response efforts. We tightly integrate our solutions with our customers' IT security controls and systems. EclecticIQ operates globally with offices in Europe, the United Kingdom and North America, and via certified value-add partners.
More on illi News
- Security Alert: TZNXG Warns Investors About "Fund Recovery" Scams
- HeartcoR Solutions Expands Suite of Remote Patient Monitoring Devices, Creating a One-Stop Shop for Clinical Trial Partners
- Assent Unveils Extended Producer Responsibility Packaging Solution to Simplify Compliance with Expanding Packaging Laws
- KatalisCoin: "Too Secure" for Bad Actors - Platform Embraces "Excessive Compliance" Criticism
- Keyanb Exchange Implements Enhanced Security Protocols Amid Industry-Wide Trust Challenges
Learn more at www.eclecticiq.com
About ThreatFabric
ThreatFabric helps financial institutions protect their online services, stop fraud and enhance customer experience. Powered by threat intelligence, ThreatFabric's solutions offer a holistic approach to risk detection and fraud prevention. MTI (Mobile Threat Intelligence) provides global visibility and context on the mobile banking threat landscape. It is the threat intelligence solution to use to protect personal data, customers and brand from financially motivated threat actors. It includes the strategic overview of threats and context as well as all relevant technical indicators. CSD (Client Side detection) provides the answer to the constantly-evolving fraud landscape and regulatory challenges. An omnichannel solution that empowers financial institutions to pro-actively detecting known and unknown threats to mitigate fraud and build trust across their online services.
Learn more at www.threatfabric.com
Source: EclecticIQ
0 Comments
Latest on illi News
- Leading Digital Finance Platform YNQTL Launches Revolutionary Web3 Digital Asset Trading Platform
- IDCXS Addresses Crypto Trading Pain Points with 2 Million TPS Processing and Multi-Layer Security Architecture
- Bridging Traditional Finance and Web3 Innovation: BLFCW Announces Strategic Vision for Regulated Web3 Economy
- NKSCX Responds to "Coordinated Smear Campaign" as Anonymous Critics Emerge Following Regulatory Milestones
- Broadway Gala Honored Also an Italian
- $ONI Listed on MEXC as ONINO Powers Europe's Tokenization Engine Into Public Platform Launch
- AZETHIO Crypto Exchange Whitepaper Reveals MPC-Secured Infrastructure Processing 1.2 Million Transactions Per Second
- CELOXFI Platform Demonstrates Advanced Security Architecture and Regulatory Framework
- Work 365 Launches PV 3.0: The Keystone Power App for Microsoft CSPs
- Local consultant shows small businesses how to turn red tape into real money
- CU Aerospace DUPLEX Satellite headed to the ISS on SpaceX NG-23 Mission
- Tour Napa Like a Local: Vines of Napa Valley Wine Passport AKA Vine Pass Unlocks Hidden Gems
- Mather Goes Bold to Challenge Society's Views on Aging
- Dental Surgical Center Accepts Sedation Patients with Medicaid for MD, WV, PA and DC
- MooreSuccess Gaming Launches Digi 995: Color Protocol – A Futuristic Coloring Experience
- A New Era in Healthcare Marketing
- Chicago: Mayor Brandon Johnson Signs 'Right to Protest' Executive Order
- Sloan's Lake Dental Launches New Website to Enhance Patient Experience and Access to Modern Dental Care
- Only 3 Weeks Left till the Start of the OpenSSL Conference 2025
- InventHelp Inventor Develops Portable Sit-On-Scale (CLR-320)