Mobile Implants

1. This type of malicious program is designed for devices running
Android OS.
Implant has the ability to record calls, activate the camera and
microphone.It also has the ability to access e-mail and SMS
messages.
1

2. A screenshot shows how the sound is recorded.
Besides, threat actors have the ability to manipulate the camera on the device.
2

3. Also an interesting opportunity is to get information about contacts.
Attackers can listen to conversations through applications such as:
WatssApp
Telegram
Line
Skype
Google.Talk
WeChat
3

4. It is important to note that the attackers were very interested in the victim's
conversations through a telegram.
Also, attackers can get information about the calendar, and the files
contained on the victim's device ,browser history.
If victim read a text or audio message,the threat actor behind that
implant, reads it too.
MD5 39be87178c84d4afd07a80323a1d4b91
Compiled on 02/08/2017
4

5. 5