{"id":47060,"date":"2022-07-04T12:05:28","date_gmt":"2022-07-04T17:05:28","guid":{"rendered":"https:\/\/blogging-techies.com\/sw\/android-gravityrat-malware-spionerar-pa-offrets-sms-foton-och-samtal\/"},"modified":"2022-07-04T12:05:28","modified_gmt":"2022-07-04T17:05:28","slug":"android-gravityrat-malware-spionerar-pa-offrets-sms-foton-och-samtal","status":"publish","type":"post","link":"https:\/\/blogging-techies.com\/sw\/android-gravityrat-malware-spionerar-pa-offrets-sms-foton-och-samtal\/","title":{"rendered":"Android: GravityRAT malware spionerar p\u00e5 offrets SMS, foton och samtal"},"content":{"rendered":"<div>\n<p><strong>Android riktas mot ett nytt spionprogram, GravityRAT.  Enligt Kaspersky modifierade hackare koden f\u00f6r ett virus som \u00e4r avsett att infektera Windows-datorer f\u00f6r att attackera Android-smartphones och surfplattor.  N\u00e4r den har installerats p\u00e5 dess offrets terminal kommer den att spionera p\u00e5 textmeddelanden, samtal, foton och ta sk\u00e4rmdumpar.<\/strong><\/p>\n<p>GravityRAT, en skadlig kod som ursprungligen var begr\u00e4nsad till Windows-datorer, attackerar nu Android-enheter och Mac-datorer, rapporterar Kaspersky-forskare.  Utvecklad av pakistanska hackare sedan 2015 har trojanen modifierats f\u00f6r att ut\u00f6ka sin r\u00e4ckvidd under de senaste tv\u00e5 \u00e5ren.<\/p>\n<p>Tack vare n\u00e5gra modifieringar av dess kod, <strong>GravityRAT kan verkligen infektera Android, Windows och MacOS<\/strong>.  Denna nya version uppt\u00e4cktes i koden f\u00f6r en reseapplikation avsedd f\u00f6r anv\u00e4ndare bosatta i Indien.<\/p>\n<p><strong>Om samma \u00e4mne: mer \u00e4n 25 000 Android-appar fr\u00e5n Play Store d\u00f6ljer skadlig kod<\/strong><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Tio_versioner_av_GravityRAT_hotar_Android-smartphones\"><\/span>Tio versioner av GravityRAT hotar Android-smartphones<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Efter utredning identifierade Kaspersky <strong>mer \u00e4n tio olika versioner av skadlig kod<\/strong> i naturen.  Malware sprider sig <em>\u201cUnder sken av legitima applikationer, till exempel s\u00e4kra fildelningsapplikationer som skulle hj\u00e4lpa till att skydda anv\u00e4ndarenheter fr\u00e5n trojaner eller genom mediaspelare\u201d<\/em>.  Forskarna specificerar inte om GravityRAT lyckades infiltrera Play Store, Googles applikationsbutik.<\/p>\n<p>N\u00e4r skadlig programvara har lyckats komma in i sina dators telefon eller dator g\u00e5r det noggrant <strong>samla in anv\u00e4ndarnas personuppgifter<\/strong>, som SMS, samtalshistorik, terminalinformation eller listan \u00f6ver kontaktade e-postadresser.  Denna information kan handlas till ett h\u00f6gt pris p\u00e5 m\u00f6rka svarta marknader.<\/p>\n<p>GravityRAT kan ocks\u00e5 ta bilder som \u00e4r lagrade p\u00e5 enheten eller <strong>ta sk\u00e4rmdumpar utan att anv\u00e4ndarna vet<\/strong>.  P\u00e5 detta s\u00e4tt \u00e5terst\u00e4ller skadlig programvara l\u00f6senorden och ID: n som du skriver p\u00e5 sk\u00e4rmen.  \u00c5terigen f\u00f6rv\u00e4ntar vi oss att hitta identifierarna p\u00e5 det m\u00f6rka n\u00e4tet.  Till exempel s\u00e4ljs \u00e5tkomstkoder f\u00f6r ett Facebook-konto f\u00f6r cirka 2,50 \u20ac.  Slutligen samlar skadlig programvara ocks\u00e5 alla txt-, .pdf-, .xml-, .doc-, .xls-, .xlsx-, .ppt-, .pptx-, .docx- och .opus-dokument.<\/p>\n<p><em>\u201dV\u00e5r unders\u00f6kning visar att sk\u00e5despelaren bakom GravityRAT forts\u00e4tter att f\u00f6rb\u00e4ttra sina spioneringsm\u00f6jligheter.  vi kan f\u00f6rv\u00e4nta oss fler skadliga attacker i Asien och Stillahavsomr\u00e5det \u201d<\/em> f\u00f6rklarar Tatyana Shishkova, s\u00e4kerhetsexpert p\u00e5 Kaspersky.  \u00c4nd\u00e5 \u00e4r det inte om\u00f6jligt att GravityRAT snart kommer att distribueras i resten av v\u00e4rlden.  F\u00f6r s\u00e4kerhet kr\u00e4ver vi dig att skydda dig med ett Android-antivirusprogram.<\/p>\n<p>K\u00e4lla: Kaspersky<\/p>\n<p><center><br \/>\n<\/center>  <\/p><\/div>\n  <div id=\"ez-toc-container\" class=\"ez-toc-v2_0_88 ez-toc-wrap-center counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 eztoc-toggle-hide-by-default' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/blogging-techies.com\/sw\/android-gravityrat-malware-spionerar-pa-offrets-sms-foton-och-samtal\/#Tio_versioner_av_GravityRAT_hotar_Android-smartphones\" >Tio versioner av GravityRAT hotar Android-smartphones<\/a><\/li><\/ul><\/nav><\/div>\n ","protected":false},"excerpt":{"rendered":"<p>Android riktas mot ett nytt spionprogram, GravityRAT. Enligt Kaspersky modifierade hackare koden f\u00f6r ett virus som \u00e4r avsett att infektera Windows-datorer f\u00f6r att attackera Android-smartphones och surfplattor. N\u00e4r den har installerats p\u00e5 dess offrets terminal kommer den att spionera p\u00e5 textmeddelanden, samtal, foton och ta sk\u00e4rmdumpar. GravityRAT, en skadlig kod som ursprungligen var begr\u00e4nsad till [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":47061,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/ipotek.net\/wp-content\/uploads\/2021\/01\/Android-GravityRAT-malware-spionerar-pa-offrets-SMS-foton-och-samtal.jpg","fifu_image_alt":"","footnotes":""},"categories":[8],"tags":[46,864,28721,10922,26,28722,45,512,12516,8561],"class_list":["post-47060","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-mobiler","tag-android","tag-foton","tag-gravityrat","tag-malware","tag-och","tag-offrets","tag-pa","tag-samtal","tag-sms","tag-spionerar"],"_links":{"self":[{"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/posts\/47060","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/comments?post=47060"}],"version-history":[{"count":0,"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/posts\/47060\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/media\/47061"}],"wp:attachment":[{"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/media?parent=47060"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/categories?post=47060"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/tags?post=47060"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}