Kaspersky detects new Android malware that hacks routers, supports Hindi
Most of the credit card companies use two-factor authentication to complete transaction, which includes one-time password to user on their mobile phones for verification.
Cyber security firm Kaspersky has detected a new Android malware that takes control of users device by hacking routers and directs user to genuine looking websites created by it to steal their details. The malware supports content in 27 languages, including Hindi, Chinese, Arabic, Bulgarian and Russian, according to a statement issued by Kaspersky.
"Kaspersky Lab's findings indicate that the attackers behind Roaming Mantis seek out vulnerable routers for compromise, and distribute the malware through a simple yet very effective trick of hijacking the DNS settings of those infected routers," the company said.
DNS converts name of websites into digital addresses and helps them connecting with servers on which websites are hosted.
The Russian cyber security firm, however, has not been able to find method which the malware uses to hack routers but said that once the malware successfully hijacks the DNS, any attempt by users to access any website leads them to a genuine-looking URL with forged content coming from the attackers' server like page requesting user to download latest version of chrome browser for better experience or update for any other social media app to add new features etc.
"The Roaming Mantis malware checks to see if the device is rooted and requests permission to be notified of any communications or browsing activity undertaken by the user. It is also capable of collecting a wide range of data, including credentials for two-factor authentication," the statement said.
Most of the credit card companies use two-factor authentication to complete transaction, which includes one-time password to user on their mobile phones for verification.
"The malware included support for four languages: Korean, simplified Chinese, Japanese, and English. The attack range has now been extended, supporting 27 languages in all, including Polish, German, Hindi, Arabic, Bulgarian and Russian," it said.
WATCH ZEE BUSINESS VIDEO HERE
The Kaspersky Lab researchers on April 16 reported on a new Android malware distributed through a domain name system (DNS) hijacking technique and targeting mainly smartphones in Asia.
The researchers found that even after four weeks the threat continues to evolve rapidly and has now extended its target geography to include Europe and the Middle East, adding a phishing option for iOS devices and PC crypto-mining capability.
Kaspersky Lab's initial research uncovered around 150 targets, mainly in South Korea, Bangladesh, and Japan, but it also revealed thousands of connections hitting the attackers' command & control servers on a daily basis, pointing to a far larger scale of attack.
Get Latest Business News, Stock Market Updates and Videos; Check your tax outgo through Income Tax Calculator and save money through our Personal Finance coverage. Check Business Breaking News Live on Zee Business Twitter and Facebook. Subscribe on YouTube.
RECOMMENDED STORIES
Power of Compounding: How many years will it take to reach Rs 3 crore corpus if your monthly SIP is Rs 4,000, Rs 5,000, or Rs 6,000
Power of Compounding: Salary Rs 25,000 per month; is it possible to create over Rs 2.60 crore corpus; understand it through calculations
Reduce Home Loan EMI vs Reduce Tenure: Rs 75 lakh, 25-year loan; which option can save Rs 25 lakh and 64 months and how? Know here
Top 7 Large and Mid Cap Mutual Funds with Best SIP Returns in 5 Years: No. 1 fund has turned Rs 15,000 monthly SIP investment into Rs 20,54,384; know about others
New Year Pick by Anil Singhvi: This smallcap stock can offer up to 75% return in long term - Check targets
08:32 AM IST