Fake Android apps push ZloyRAT at Russians amid fuel and drone fears
Original title: Malicious apps prey on Russians’ anxiety about fuel prices, drone strikes
F6 says three apps, including a police-and-fuel map, steal banking data; download counts and losses were not disclosed.
Researchers at Russian firm F6 say cybercriminals are pushing malicious Android apps that exploit Russian drivers’ worries about fuel shortages and drone strikes. A fake traffic-police and fuel-station app, plus GosuVPN and Drone Radar, install ZloyRAT, which can read messages, contacts and calls and target data tied to more than 60 banking and financial apps. All three are promoted from a site registered in early October; F6 asked that it be blocked in Russia. The actor is unknown, and F6 did not report download totals or confirmed financial losses.
Unconfirmed: F6 did not identify the actor or confirm downloads or financial losses.
- ZloyRAT can send texts and place calls from infected phones.
- It also targets marketplaces, government services and Telegram.
- The trojan can show a legitimate site to hide activity.
- Earlier F6 work found RedWing Stealer in more than 800 samples.
- Separate FuelDrive and Toplivo24 sites sold bulk fuel as scams.
Impact: Theft of messages, contacts, calls and financial-app data
| Product | Affected |
|---|---|
| Android | — |
- 1.Avoid unofficial Android apps offering fuel maps, drone alerts or free government VPNs.
- Malware
- ZloyRATRedWing Stealer
- Organizations
- F6
- Countries
- Russia
From the original article
3 min read at therecord.mediaCybercriminals are stuffing infostealer malware into bogus apps aimed at tracking gas prices, police activity, drone strikes and other information of concern to average Russians, researchers said.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.