Aggiornamenti recenti Marzo 29th, 2024 9:00 AM
Set 30, 2021 Marco Schiaffino Attacchi, In evidenza, Malware, News, RSS 0
Una vera e propria “pandemia” che ha fruttato ai pirati informatici centinaia di milioni di euro. L’impatto di GriftHorse, il trojan che prende di mira i sistemi Android, si candida a diventare uno degli incidenti di sicurezza più gravi nel settore smartphone.
Come spiegano i ricercatori di Zimperium zLabs in un report pubblicato sul blog della società di sicurezza, la campagna di diffusione del trojan si è sviluppata nell’arco di 5 mesi, tra novembre 2020 e aprile 2021.
Il malware è stato distribuito attraverso 200 diverse app per Android, ospitate sia su Google Play (da cui sono state rimosse al momento della scoperta di GirftHorse) sia su store di terze parti, raggiungendo almeno 10 milioni di utenti in 70 paesi nel mondo.
Lo strumento utilizzato dai pirati informatici per aggirare i controlli è stato Apache Cordova, un tool che consente agli sviluppatori di impostare degli aggiornamenti automatici delle app e che i cyber criminali hanno usato per eseguire il codice malevolo in tempo reale.
Le app installate, una volta eseguito l’aggiornamento malevolo, cominciano a visualizzare notifiche che inducono le vittime a sottoscrivere servizi a pagamento via SMS con costi esorbitanti, che secondo i ricercatori possono arrivare anche a 30 euro.
La campagna GriftHorse, secondo la stima dei ricercatori, avrebbe fruttato loro centinaia di milioni di euro, che difficilmente potranno essere recuperati.
Ecco l’elenco completo delle applicazioni contenenti il trojan e la stima delle loro installazioni.
Nome pacchetto | Nome dell’app | Min. | Max |
com.tra.nslat.orpro.htp | Handy Translator Pro | 500,000 | 1,000,000 |
com.heartratteandpulsetracker | Heart Rate and Pulse Tracker | 100,000 | 500,000 |
com.geospot.location.glt | Geospot: GPS Location Tracker | 100,000 | 500,000 |
com.icare.fin.loc | iCare – Find Location | 100,000 | 500,000 |
my.chat.translator | My Chat Translator | 100,000 | 500,000 |
com.bus.metrolis.s | Bus – Metrolis 2021 | 100,000 | 500,000 |
com.free.translator.photo.am | Free Translator Photo | 100,000 | 500,000 |
com.locker.tul.lt | Locker Tool | 100,000 | 500,000 |
com.fin.gerp.rint.fc | Fingerprint Changer | 100,000 | 500,000 |
com.coll.rec.ord.er | Call Recoder Pro | 100,000 | 500,000 |
instant.speech.translation | Instant Speech Translation | 100,000 | 500,000 |
racers.car.driver | Racers Car Driver | 100,000 | 500,000 |
slime.simu.lator | Slime Simulator | 100,000 | 500,000 |
keyboard.the.mes | Keyboard Themes | 100,000 | 500,000 |
whats.me.sticker | What’s Me Sticker | 100,000 | 500,000 |
amazing.video.editor | Amazing Video Editor | 100,000 | 500,000 |
sa.fe.lock | Safe Lock | 100,000 | 500,000 |
heart.rhy.thm | Heart Rhythm | 100,000 | 500,000 |
com.sma.spot.loca.tor | Smart Spot Locator | 100,000 | 500,000 |
cut.cut.pro | CutCut Pro | 100,000 | 500,000 |
com.offroaders.survive | OFFRoaders – Survive | 100,000 | 500,000 |
com.phon.fin.by.cl.ap | Phone Finder by Clapping | 100,000 | 500,000 |
com.drive.bus.bds | Bus Driving Simulator | 100,000 | 500,000 |
com.finger.print.def | Fingerprint Defender | 100,000 | 500,000 |
com.lifeel.scanandtest | Lifeel – scan and test | 100,000 | 500,000 |
com.la.so.uncher.io | Launcher iOS 15 | 100,000 | 500,000 |
com.gunt.ycoon.dle | Idle Gun Tycoo\u202an\u202c | 50,000 | 100,000 |
com.scan.asdn | Scanner App Scan Docs & Notes | 50,000 | 100,000 |
com.chat.trans.alm | Chat Translator All Messengers | 50,000 | 100,000 |
com.hunt.contact.ro | Hunt Contact | 50,000 | 100,000 |
com.lco.nylco | Icony | 50,000 | 100,000 |
horoscope.fortune.com | Horoscope : Fortune | 50,000 | 100,000 |
fit.ness.point | Fitness Point | 50,000 | 100,000 |
com.qub.la | Qibla AR Pro | 50,000 | 100,000 |
com.heartrateandmealtracker | Heart Rate and Meal Tracker | 50,000 | 100,000 |
com.mneasytrn.slator | Mine Easy Translator | 50,000 | 100,000 |
com.phone.control.blockspamx | PhoneControl Block Spam Calls | 50,000 | 100,000 |
com.paral.lax.paper.thre | Parallax paper 3D | 50,000 | 100,000 |
com.photo.translator.spt | SnapLens – Photo Translator | 50,000 | 100,000 |
com.qibl.apas.dir | Qibla Pass Direction | 50,000 | 100,000 |
com.caollerrrex | Caller-x | 50,000 | 100,000 |
com.cl.ap | Clap | 50,000 | 100,000 |
com.eff.phot.opro | Photo Effect Pro | 10,000 | 50,000 |
com.icon.nec.ted.trac.ker | iConnected Tracker | 10,000 | 50,000 |
com.smal.lcallrecorder | Smart Call Recorder | 10,000 | 50,000 |
com.hor.oscope.pal | Daily Horoscope & Life Palmestry | 10,000 | 50,000 |
com.qiblacompasslocatoriqez | Qibla Compass (Kaaba Locator) | 10,000 | 50,000 |
com.proo.kie.phot.edtr | Prookie-Cartoon Photo Editor | 10,000 | 50,000 |
com.qibla.ultimate.qu | Qibla Ultimate | 10,000 | 50,000 |
com.truck.roud.offroad.z | Truck – RoudDrive Offroad | 10,000 | 50,000 |
com.gpsphonuetrackerfamilylocator | GPS Phone Tracker – Family Locator | 10,000 | 50,000 |
com.call.recorder.cri | Call Recorder iCall | 10,000 | 50,000 |
com.pikcho.editor | PikCho Editor app | 10,000 | 50,000 |
com.streetprocarsracingss | Street Cars: pro Racing | 10,000 | 50,000 |
com.cinema.hall | Cinema Hall: Free HD Movies | 10,000 | 50,000 |
com.ivlewepapallr.bkragonucd | Live Wallpaper & Background | 10,000 | 50,000 |
com.in1.tel.ligent.trans.lt.pro | Intelligent Translator Pro | 10,000 | 50,000 |
com.aceana.lyzzer | Face Analyzer | 10,000 | 50,000 |
com.tueclert.ruercder | TrueCaller & TrueRecoder | 10,000 | 50,000 |
com.trans.lator.txt.voice.pht | iTranslator_ Text & Voice & Photo | 10,000 | 50,000 |
com.puls.rat.monik | Pulse App – Heart Rate Monitor | 10,000 | 50,000 |
com.vidphoremanger | Video & Photo Recovery Manager 2 | 10,000 | 50,000 |
online.expresscredit.com | Быстрые кредиты 24\7 | 10,000 | 50,000 |
fit.ness.trainer | Fitness Trainer | 10,000 | 50,000 |
com.clip.buddy | ClipBuddy | 10,000 | 50,000 |
vec.tor.art | Vector arts | 10,000 | 50,000 |
ludo.speak.v2 | Ludo Speak v2.0 | 10,000 | 50,000 |
battery.live.wallpaperhd | Battery Live Wallpaper 4K | 10,000 | 50,000 |
com.heartrateproxhealthmonitor | Heart Rate Pro Health Monitor | 10,000 | 50,000 |
com.locatorqiafindlocation | Locatoria – Find Location | 10,000 | 50000 |
com.gtconacer | GetContacter | 10,000 | 50000 |
ph.oto.lab | Photo Lab | 10,000 | 50,000 |
com.phoneboster | AR Phone Booster – Battery Saver | 10,000 | 50,000 |
com.translator.arabic.en | English Arabic Translator direct | 10,000 | 50,000 |
com.vpn.fast.proxy.fep | VPN Zone – Fast & Easy Proxy | 10,000 | 50,000 |
com.projector.mobile.phone | 100% Projector for Mobile Phone | 10,000 | 50,000 |
com.forza.mobile.ult.ed | Forza H Mobile 4 Ultimate Edition | 10,000 | 50,000 |
com.sticky.slime.sim.asmr.nws | Amazing Sticky Slime Simulator ASMR\u200f | 10,000 | 50,000 |
com.clap.t.findz.m.phone | Clap To Find My Phone | 10,000 | 50,000 |
com.mirror.scree.n.cast.tvv | Screen Mirroring TV Cast | 10,000 | 50,000 |
com.frcallworwid | Free Calls WorldWide | 10,000 | 50,000 |
locator.plus.my | My Locator Plus | 10,000 | 50,000 |
com.isalamqciqc | iSalam Qibla Compass | 5,000 | 10,000 |
com.lang.tra.nslate.ltef | Language Translator-Easy&Fast | 5,000 | 10,000 |
com.wifi.unlock.pas.pro.x | WiFi Unlock Password Pro X | 5,000 | 10,000 |
com.chat.live.stream.pvc | Pony Video Chat-Live Stream | 5,000 | 10,000 |
com.zodiac.hand | Zodiac : Hand | 5,000 | 10,000 |
com.lud.gam.ecl | Ludo Game Classic | 5,000 | 10,000 |
com.locx.findx.locx | Loca – Find Location | 5,000 | 10,000 |
com.easy.tv.show.ets | Easy TV Show | 5,000 | 10,000 |
com.qiblaquran | Qibla correct Quran Coran Koran | 5,000 | 10,000 |
com.dat.ing.app.sw.mt | Dating App – Sweet Meet | 5,000 | 10,000 |
com.circ.leloca.fi.nder | R Circle – Location Finder | 5,000 | 10,000 |
com.taggsskconattc | TagsContact | 5,000 | 10,000 |
com.ela.salaty.musl.qibla | Ela-Salaty: Muslim Prayer Times & Qibla Direction | 1,000 | 5,000 |
com.qiblacompassrtvi | Qibla Compass | 1,000 | 5,000 |
com.soul.scanner.check.yh | Soul Scanner – Check Your | 1,000 | 5,000 |
com.chat.video.live.ciao | CIAO – Live Video Chat | 1,000 | 5,000 |
com.plant.camera.identifier.pci | Plant Camera Identifier | 1,000 | 5,000 |
com.call.colop.chan.cc | Color Call Changer | 1,000 | 5,000 |
com.squishy.pop.it | Squishy and Pop it | 1,000 | 5,000 |
com.keyboard.virt.projector.app | Keyboard: Virtual Projector App | 1,000 | 5,000 |
com.scanr.gdp.doc | Scanner Pro App: PDF Document | 1,000 | 5,000 |
com.qrrea.derpro | QR Reader Pro | 1,000 | 5,000 |
com.f.x.key.bo.ard | FX Keyboard | 1,000 | 5,000 |
photoeditor.frame.com | You Frame | 1,000 | 5,000 |
call.record.prov | Call Record Pro | 1,000 | 5,000 |
com.isl.srick.ers | Free Islamic Stickers 2021 | 1,000 | 5,000 |
com.qr.code.reader.scan | QR Code Reader – Barcode Scanner | 1,000 | 5,000 |
com.scan.n.ray | Bag X-Ray 100% Scanner | 1,000 | 5,000 |
com.phone.caller.screnn | Phone Caller Screen 2021 | 1,000 | 5,000 |
com.trnsteito.nneapp | Translate It – Online App | 1,000 | 5,000 |
com.mobthinfind | Mobile Things Finder | 1,000 | 5,000 |
com.piriufffcaer | Proof-Caller | 1,000 | 5,000 |
com.hones.earcy.laof | Phone Search by Clap | 1,000 | 5,000 |
com.secontranslapro | Second Translate PRO | 1,000 | 5,000 |
cal.ler.ids | CallerID | 1,000 | 5,000 |
com.camera.d.plan | 3D Camera To Plan | 500 | 1,000 |
com.qib.find.qib.di | Qibla Finder – Qibla Direction | 500 | 1,000 |
com.stick.maker.waps | Stickers Maker for WhatsApp | 500 | 1,000 |
com.qbbl.ldironwach | Qibla direction watch (compass) | 500 | 1,000 |
com.bo.ea.lesss.piano | Piano Bot Easy Lessons | 500 | 1000 |
com.seond.honen.umber | CallHelp: Second Phone Number | 500 | 1000 |
com.faspulhearratmon | FastPulse – Heart Rate Monitor | 500 | 1000 |
com.alleid.pam.lofhys | Caller ID & Spam Blocker | 500 | 1000 |
com.free.coupon2021 | Free Coupons 2021 | 100 | 500 |
com.kfc.saudi.delivery.coupons | KFC Saudi – Get free delivery and 50% off coupons | 100 | 500 |
com.skycoach.gg | Skycoach | 100 | 500 |
com.live.chat.meet.hoo | HOO Live – Meet and Chat | 100 | 500 |
easy.bass.booster | Easy Bass Booster | 10 | 50 |
com.coupongiftsnstashop | Coupons & Gifts: InstaShop | 10 | 50 |
com.finnccontat | FindContact | 10 | 50 |
com.aunch.erios.drog | Launcher iOS for Android | 10 | 50 |
com.blo.cced.als.pam.rzd | Call Blocker-Spam Call Blocker | 10 | 50 |
com.blo.cced.als.pam.rzd | Call Blocker-Spam Call Blocker | 10 | 50 |
com.ivemobibercker | Live Mobile Number Tracker | 10 | 50 |
Total | 4,287,470 | 17,345,450 |
Mar 07, 2024 0
Feb 23, 2024 0
Dic 07, 2023 0
Nov 02, 2023 0
Mar 29, 2024 0
Mar 28, 2024 0
Mar 27, 2024 0
Mar 26, 2024 0
Mar 29, 2024 0
Le aziende hanno compreso l’importanza della...Mar 28, 2024 0
Stando al Rapporto Annuale sulle Minacce Informatiche di...Mar 27, 2024 0
La sanità viene presa di mira dagli infostealer: a dirlo...Mar 22, 2024 0
Nel 2024 i deepfake saranno una delle applicazioni di...Mar 21, 2024 0
Acronis annuncia l’ottenimento della qualificazione...Mag 04, 2018 0
E se vi dicessimo che la saga di Star Wars ...Nov 14, 2016 2
Abbiamo rubato al blog di Kaspersky un vecchio pezzo di...Nov 08, 2016 2
Il numero uno degli scacchi mondiali Magnus Carlsen ha...Ott 28, 2016 0
Il pirata informatico che ha creato il ransomware cerca...Ott 11, 2016 0
Dopo la raffica di figuracce, l’azienda sospende per...Mar 29, 2024 0
Le aziende hanno compreso l’importanza della...Mar 28, 2024 0
Stando al Rapporto Annuale sulle Minacce Informatiche di...Mar 26, 2024 0
Un gruppo di ricercatori ha individuato un grosso problema...Mar 25, 2024 0
La scorsa settimana ha rappresentato una sfida...Mar 25, 2024 0
Il 22 marzo si è concluso il Pwn2Own, l’hackathon...