 | |
| (Image Credit: Pixabay) |
Google block ‘Lipizzan’ Android Spyware
a new batch of spyware name ‘Lipizzan’ that could capture user’s text messages, voices calls, location data, and photos, has been discovered and blocked by Google.
The company in a blog post said that they discovered a new family of Android spyware while investigating another spyware named ‘Chrysaor’
the Spyware Lipizzan’s code contains a reference to a cyber arms company, Equus Technologies
Lipizzan is a multi-stage spyware product capable of monitoring and exfiltrating a user’s email, SMS messages, location, voice calls and media
The First Wave of the spyware was found by the Google Play protect App and was distributed through several channels, applications including Google Play, and typically impersonated harmless apps such as Backup applications,
Once the Lipizzan spyware gained access to your phone it would then load a second “license verification” stage, which would let survey the infected device and validate certain abort criteria.
if all the clear , it would go to the second stage which led to root the device with known exploits and begin the exfiltrate device data to a Command and Control server.
Which apps were vulnerable to Lipizzan spyware .?
Once the access is gained by the spyware on your Android Phone, it will then try to retrieve the data from commonly used apps such as Gmail, Hangout, Snapchat, Telegram, Viber, WhatsApp, Skype, Messenger, Linkedin.