Iranian hackers' Android malware spies on dissidents by stealing 2FA codes

Iranian hackers’ Android malware spies on dissidents by stealing 2FA codes

Gadgets


It’s no secret that some countries have spied on their citizens through innocuous-looking apps, but one effort is more extensive than usual. Check Point Research has discovered (via ZDNet) that Rampant Kitten, an Iranian hacker group that has targeted the country’s political opponents for years, has developed Android malware focused on stealing two-factor authentication codes. It isn’t just focused on any one service, either — it targets Google, Telegram, and other major internet or social services.

The attackers first use a phishing trojan to collect login details, and then try those with the real site. If the victim has two-factor authentication turned on, the newly-reported malware intercepts the incoming SMS messages and quietly sends copies to the intruders.



Source link

The Tech Guy

Communicator. Certified beer fanatic. Problem solver. Music scholar. Devoted food aficionado.

Leave a Reply

Your email address will not be published. Required fields are marked *