Security researchers have discovered a new type of android spyware that uses techniques to record the activity of WhatsApp users. The new malware, called skygofree, was first spotted by antivirus firm Kaspersky. Skygofree can carry out a number of remote commands, including taking pictures or videos with the affected device, and even recording audio when the user enters a specified location. It is said that malware was first made 3 years ago and has continually improved since.
The malware is able to carry out location based audio recordings, meaning it can automatically begin recording the devices surroundings when that device enters a specific place. It can also spy on messages using accessibility services, and connect different infected devices to Wi-Fi networks controlled by cybercriminals.
The skygofree android implant is one of the most powerful spyware tools that has ever existed it has exceptional capabilities, usage of multiple exploits for gaining root privileges, a complex payload structure, never before seen surveillance features such as recording surrounding audio in specified locations.
Kaspersky lab says they have identified several web landing pages that spread the implant by mimicking the pages of mobile operators. They have warned that they are not sure what environment these landing pages were used in the wild, but according to the information they have, they can just assume that they are perfect for exploitation using malicious redirects or man in the middle attacks.
For example this could be when your device connects to a WI-FI’s access point that is infected or controlled by the attackers. This new report comes just a week after whatsApp was relieved to have a huge design flow, which allows anyone to infiltrate private group chats despite its end to end encryption.
The researchers also revealed that anyone with control over whatsapp’s serves can add people to private group chats, including staff hackers and government who legally demand access.
