IRC bot for Android
Jump to navigation
Jump to search
(Publication) Google search: [1]
| IRC bot for Android | |
|---|---|
| Botnet | |
| Malware | Foncy |
| Botnet/malware group | |
| Exploit kits | |
| Services | |
| Feature | |
| Distribution vector | |
| Target | |
| Origin | |
| Campaign | |
| Operation/Working group | |
| Vulnerability | |
| CCProtocol | IRC |
| Date | 2012 / 13 Janvier 2012 |
| Editor/Conference | Kaspersky lab |
| Link | http://www.securelist.com/en/blog/208193332/IRC bot for Android (Archive copy) |
| Author | Denis Maslennikov |
| Type | |
Abstract
“ The IRC bot, after launching the SMS Trojan, will try to connect to IRC server 199.68.*.* (it was unavailable at the time of research) on channel ‘#andros’ with a random nickname. After that it is able to receive any shell commands from this server and execute them on an infected device.
This is first IRC bot for Android we’ve seen so far. And what is more interesting is that comes together with a root exploit and an SMS Trojan. They work together efficiently and the cybercriminal in this case has full access to an infected smartphone and can do anything he wants. [...]
Bibtex
@misc{Lua error: Cannot create process: proc_open(/dev/null): failed to open stream: Operation not permitted2012BFR884,
editor = {Kaspersky lab},
author = {Denis Maslennikov},
title = {IRC bot for Android},
date = {Error: Invalid time.},
month = Error: Invalid time.,
year = {2012},
howpublished = {\url{http://www.securelist.com/en/blog/208193332/IRC_bot_for_Android}},
}