TgToxic Malware’s Automated Framework Targets Southeast Asia Android Users

We look into an ongoing malware campaign we named TgToxic, targeting Android mobile users in Taiwan, Thailand, and Indonesia since July 2022. The malware steals users’ credentials and assets such as cryptocurrency from digital wallets, as well as money from bank and finance apps. Analyzing the automated features of the malware, we found that the threat actor abused legitimate test framework Easyclick to write a Javascript-based automation script for functions such as clicks and gestures.

Lesen Sie weiter auf: TgToxic Malware’s Automated Framework Targets Southeast Asia Android Users
Quelle: Trend Micro Blog
Titelbild/Grafik by Trend Micro Blog

Kommentare und Fragen

Möchten Sie zu diesem Artikel ein Kommentar abgeben oder haben dazu eine Frage, dann machen Sie dies bitte immer auf der Herausgeberseite!

Aktuelles von Trend Micro Deutschland | Blog

• Patch CVE-2023-23397 Immediately: What You Need To Know and Do
• S4x23 Review Part 3: Healthcare Cybersecurity Sessions
• Making the digital world safer, one Tesla at a time
• Emotet Returns, Now Adopts Binary Padding for Evasion
• S4x23 Review Part 2: Evolving Energy Cybersecurity
• Examining Ransomware Payments From a Data-Science Lens
• S4x23 Review Part 1: What's New in OT Security
• Leveraging Data Science to Minimize the Blast Radius of Ransomware Attacks
• Managed XDR Exposes Spear-Phishing Campaign Targeting Hospitality Industry Using RedLine Stealer
• Iron Tiger’s SysUpdate Reappears, Adds Linux Targeting