#FireScamMalware
Article: https://www.bleepingcomputer.com/news/security/new-firescam-android-malware-poses-as-rustore-app-to-steal-data/
Article: https://www.bleepingcomputer.com/news/security/new-firescam-android-malware-poses-as-rustore-app-to-steal-data/
January 4, 2025 at 7:37 PM
Android malware FireScam, disguised as Telegram Premium, steals data & controls devices. Spread via a fake RuStore site, it uses a multi-stage infection, exfiltrating data to Firebase and using WebSockets for command & control.#FireScamMalware
January 6, 2025 at 1:03 PM
Android malware FireScam, disguised as Telegram Premium, steals data & controls devices. Spread via a fake RuStore site, it uses a multi-stage infection, exfiltrating data to Firebase and using WebSockets for command & control.#FireScamMalware
Android malware FireScam mimics RuStore or Telegram Premium. Spread via phishing, it uses a dropper (GetAppsRu.apk) to steal logins, SMS, clipboard, and financial data, sending it to Firebase. Advanced evasion techniques are employed.#FireScamMalware
January 4, 2025 at 7:37 PM
Android malware FireScam mimics RuStore or Telegram Premium. Spread via phishing, it uses a dropper (GetAppsRu.apk) to steal logins, SMS, clipboard, and financial data, sending it to Firebase. Advanced evasion techniques are employed.#FireScamMalware