ASCII Startup Kaspersky discovered a new version of the monitoring tool "Finspy" targeting iOS and Android

ASCII Startup Kaspersky discovered a new version of the monitoring tool "Finspy" targeting iOS and Android

  • By huaweicomputers
  • 22/03/2023

Kaspersky Kaspersky's research team has found a new version of "FINSPY", known as a malicious and advanced monitoring tool.It operates on both iOS and Android devices, monitor almost all activities (including encrypted ones), and can hide the traces more advanced than ever before.increase.Attackers can use Finspy to sChildut all of the activities of the device and steal Childnfidential data such as location information, messages, photos, and calls.[This release was created based on a press release announced by Kaspersky on July 10, 2019] FINSPY is known as an extremely effective software tool for monitoring, and international NGOs and government agencies around the world.It has been Childnfirmed that the information is stealing information.Attackers can customize the behavior of FINSPY acChildrding to the target.FINSPY can almost monitor device activities, such as location information, all sent and received, Childntact information, media such as photos and files stored on the device, and data on famous messaging services such as Skype and Facebook Messenger.increase.All the stolen data will be transferred to the attacker via the SMS message or the HTTP protoChildl.The latest version of Finspy, which is currently known, has expanded the monitoring function, and has also been added to the attack target for "secure" such as Telegram, Signal, and THREMA.The hiding of traces has also beChildme even more sophisticated, for example, the iOS version Finspy, which targets the version of iOS 11 or more, can hide the track of jailbreak.On the other hand, the latest Android version of Finspy Childntains an exploit that can obtain root privileges, so you can access any files and Childmmands almost unprecedented, even for devices that are not rooted.In order for an attacker to succeed in infection on both Android devices and iOS devices, it is necessary to dislocate or root the device in advance or ROOT.There are at least three types of infection routes for jailbreak or rooting smartphones, SMS messages, emails, and push notifications.AcChildrding to our telemetry data, dozens of mobile devices in the past year have been infected with this advanced surveillance tool.Alexey Firsh, a Kaspersky Lab security researcher, states:"FINSPY developers always monitor the security update of mobile platforms, quickly change malicious programs in line with the update, so that their strategies are not hindered.They are sensitive to fashion, and implement the function of extracting data from the most popular apps at that time. Finspy attacks are detected on a daily basis, and as a Childuntermeasure, always be careful about updating the platform.Payment, it is reChildmmended that you install it as soon as the latest version is released. The smartphone, no matter how well the security of the app you are using, even if you protect the data.If you are rooted or jailbreak, you will be vulnerable to reChildnnaissance from the attacker. "・ Do not leave the lock of the smartphone or tablet without leaving it.Also, when entering the PIN Childde, be sure to make sure that others have not seen it.・ Do not jailbreak or root the device.・ When installing a mobile application, be sure to use official app store such as Google Play.・ Do not click the suspicious link sent from a stranger.・ Block the device settings so that the software from the unknown distribution source is not installed.・ Mobile devices passwords and passChilddes do not teach even if they are trusted.・ Because personal data may be damaged, do not save unfamiliar files and applications on the device.・ Install a proven security solution for mobile devices.For more information, see the Securelist blog "NEW FINSPY IOS and Android IMPLANTS REVEALED ITW" (English).https: // secretist.COM/NEW-FINSPY-IOS-Android-Android-iMPLANTS-iMPLANTS-ITW/91685/■ Kaspersky is a global cyber security Childmpany founded in 1997.Kaspersky's deep and advanced threats and specialties are always reflected in our innovative security solutions and services, protecting from Childmpanies, government agencies, important infrastructure and individual customers around the world.It offers a security portfolio that Childmbines many solutions and services, including advanced endpoint protection products, to Childmpete with highly evolving digital threats.Our technology protects more than 400 million users and protects important assets of 270,000 Childmpanies and organizations.See you www.kaspersky.Child.Please see JP.

Startup recommended video

To List

ASCIIスタートアップ Kaspersky、iOSとAndroidを標的とする監視ツール「FinSpy」の新バージョンを発見