Android malware (and iOS enhancements)

Research from Checkpoint: Meet Black Rose Lucy, the Latest Russian MaaS Botnet –

“The Black Rose Lucy MaaS product is a malware bundle consisting of:

• Lucy Loader – a remote control dashboard, which controls an entire botnet of victim devices and hosts and deploys additional malware payloads.
• Black Rose Dropper – a dropper that targets Android phones, collects victim device data, listens to a remote command and control (C&C) server and installs extra malware sent from a C&C server.”

---

Lukas Stefanko for ESET: Fake finance apps on Google Play target users from around the world – “Cybercrooks use bogus apps to phish six online banks and a cryptocurrency exchange…the apps have impersonated six banks from New Zealand, Australia, the United Kingdom, Switzerland and Poland, and the Austrian cryptocurrency exchange Bitpanda. Using bogus forms, the malicious fakes phish for credit card details and/or login credentials to the impersonated legitimate services.”

---

On a more positive (but not on the Android front)… John E. Dunn for Sophos: iOS 12 is here: these are the security features you need to know about

David Harley