You are using an outdated browser. For a faster, safer browsing experience, upgrade for free today.
Avast Researchers Warn Users of Android Trojan SMSFactory

Avast Researchers Warn Users of Android Trojan SMSFactory

2022-06-10

SMS Factory steals people’s money by sending premium SMS and making calls at premium-rate phone numbers

Avast has released new research around an Android Trojan it is calling SMSFactory. SMS Factory can cost victims $336 a year, by sending premium SMS and making calls to premium-rate phone numbers, without requiring the user to enter their phone number.

The mobile malware is spreading through malvertising, push notifications and alerts displayed on sites offering game hacks, adult content, or free video streaming sites, serving the malware disguised as an app in which users can access gaming, videos or adult content. Once installed, the malware hides itself, making it nearly impossible for victims to detect what is causing the charges on their phone bills.

Avast has protected more than 165,000 Avast users from SMSFactory in the past year (May 2021-May 2022), with the highest number of users protected in Russia, Brazil, Argentina, Turkey, and Ukraine.

In contrast to recent TrojanSMS campaigns, SMSFactory includes stealth features such as lack of app icon and name, which wouldn’t be allowed on the Google Play Store, hence the bad actors have resorted to a reasonably intricate network of sites for delivery and subsequent communication with the malware.

Avast researcher Jakub Vávra also found versions capable of creating a new Admin account on the infected device, making it more difficult to remove, and a version capable of copying, and extracting victims’ contact lists, likely to further spread the malware to contacts. Some versions of the malware redirect users to sites in order to get them to install another SMSFactory app onto their device.

More information on SMSFactory, and advice on how users can protect themselves can be found on the Avast blog: https://blog.avast.com/smsfactory-android-trojan.

Source: avast.com

Other news

Netwrix Continues to Secure Organizations

Netwrix has upgraded a third of its product portfolio in the past six months.

Netwrix, a vendor that delivers effective and accessible cybersecurity to any organization, has released new versions of six products since October 2023 and expanded its offering with data loss prevention (DLP) capabilities. The enhancements further help customers face digital threats with confidence by enabling them to identify and protect sensitive data as well as to detect, respond to, and recover from attacks.

(more…)

PC Magazine Names Arcserve ShadowProtect SPX Best Windows Backup Solution for SMBs

Eden Prairie, MN – January 3, 2024 – Arcserve®, the world’s most experienced provider of backup, recovery, and immutable storage solutions for unified data protection against ransomware and disasters, today announced that its Arcserve ShadowProtect SPX solution has been named the best Windows backup solution for SMBs by PC Magazine in its annual roundup of backup software.

This prestigious recognition underscores Arcserve’s commitment to delivering best-in-class data protection for small and medium-sized businesses. Arcserve ShadowProtect SPX simplifies backup and recovery with an intuitive interface, automated scheduling, and robust disaster recovery capabilities.

PC Magazine praised Arcserve ShadowProtect SPX for its:

  • Ease of use: The intuitive interface makes it easy for even non-technical users to set up and manage backups.
  • Comprehensive features: Arcserve ShadowProtect SPX offers a wide range of features, including image backups, file-level backups, and bare-metal restore.
  • Reliability: Arcserve ShadowProtect SPX is a proven and reliable solution that has been trusted by businesses of all sizes for over 20 years.
  • Value: Arcserve ShadowProtect SPX is an affordable solution that provides excellent value for the price.

Source: www.arcserve.com