Lab Matters – The Underground Economy and Ecosystem of the SMS

In some Eastern European countries (Russia and Ukraine especially), there are legal loopholes that allow the use of SMS premium rate numbers anonymously. In addition, some Russian mobile operators allow people to transfer money from prepaid SIM cards to bank accounts or credit cards. When combined, these two things allow cyber-crime activity that generate illegal profits. In this issue of Lab Matters webcast, Kaspersky Lab malware researcher Denis Maslennikov discusses this component of mobile security and talks about the ways cyber-criminals are maliciously exploiting prepaid SIM cards and money transfers. Maslennikov also describes the main pillar of the underground economy and ecosystem of his type of fraud.

Kaspersky researchers have discovered new Mirage Kitten attacks using previously undocumented malware families: NodeRabbit in Node.js and PollCat in JavaScript.

Our experts discovered a new CoolClient backdoor variant with a kernel-mode rootkit driver that hides malicious processes, files, and network connections from security tools and threat analysts.

Kaspersky experts break down a new Armored Likho campaign that poses as a fundraising efforts and delivers a new Still Toolkit aimed at stealing Telegram data and eavesdropping on victims.

Kaspersky researchers reveal previously undocumented malware attributed to Mirage Kitten (UNC1549, Smoke Sandstorm, Nimbus Manticore): NightLedger backdoor, ArcBridge, and BridgeHead tunneling tools.