Fraudsters distribute malware under the guise of antivirus software and other security applications to gain access to online banking and instant messaging. About this reported in the Department for organizing the fight against illegal use of information and communications technology (UBK) of the Ministry of Internal Affairs of Russia.
They note that there has been a recent increase in activity of the LunaSpy and SpyNote spyware programs.
“LunaSpy is distributed through instant messengers under the guise of anti-virus and banking protection programs. SpyNote is a RAT (Remote Access Trojan). Used by phone scammers following a “support chat” with a request to install a “special program for protection,” the text said.
LunaSpy simulates scanning and displays fake threats, records audio and video from microphones and cameras, and tracks users' geolocation, the Department of Home Affairs added. In return, SpyNote performs overlay attacks on banking applications and takes full control of the device remotely.
