28/07/2017

Google Found Lipizzan Spyware That Stealing SMS,Voice Calls,Location And Media

Google Discover A New Spyware While Investing Chrysaor, Spyware Called Lipizzan And Can Steal Voice Calls,Location,SMS And More.Protect Yourself Using Google Play Protect 
Share→

In A Security Blog Post, Google Mentioned A New Spyware Called "Lipizzan" Which Is Found In 20 Android Apps And Almost 100 Devices Are Affected With This Spyware.


Lipizzan Is A Multi-Stage Spyware Product Capable Of Monitoring And Ex-Filtrating A User's Email, SMS Message, Location, Voice Calls, And Media. Lipizzan' s Spyware's Code Contains Reference To Cyber Company, Eqqus Technologies.

Google Found 20 Lipizzan Apps On Fewer Than 100 Devices.Google Also Blocked The Developer Of These Apps And From Android Ecosystem.Google Play Protect Which Is Announced On I/O And Currently Rolling Out On Devices Is Now Enhanced To Detect This Spyware And Can Remove The Lipizzan Apps.

Lipizzan Was A Complex Two Stage Spyware Tool.In The First Stage, Google Play Protect Found That It Was Distributed Through Several Channels Including Google Play, And Impersonated Apps That Sounded Innocuous Such As Back Up And Cleaner App.After Google Blocked These Apps, New Apps Were Uploaded With Similar Formats But With Some Difference.Apps Changed From Back Up Apps To Looking Like A Cleaner, Notepad, Alarm Manager App.

Upon Installation, Lipizzan Would Download And Load "License Verification" Stage, Which Survey The Infected Device And Validate Certain Abort Criteria.After If Give All Clear, In Second Stage Lipizzan Root The Device That Running Older Versions Of Android.This Allowed The Lipizzan Code To Bypass Security Protection-Built Into The Operating System.


Once It Implanted On A Target Device, Lipizzan Capable Of Performing Monitoring And Ex-Filtrating The Results Of Tasks Like-Call Recording, VOIP Recording, Recording From The Microphone, Location Monitoring, Taking Screenshots, Taking Photos With The Device Camera, Fetching Information Of User Including Contacts, Call Logs, SMS, App Data, Fetching Of Device Information And Files.


Lipizzan Targeted Data Collection Was Able To Accessed From Apps Including Gmail, Snapchat, WhatsApp, Skype, Telegram, Linkedin, Facebook Messenger, Viber, Telegram, Hangouts, Kakao Talk, StockEmail, Threema.

Fewer Than 100 Android Devices Which Means Family Affected Only 0.000007% Of Android Devices.Google Play Protect Removed Lipizzan Apps From Affected Devices And Actively Blocks Installs On New Android Devices.

Google Also Mentioned How To Protect Your Android From These Spywares-

1.)Make Sure You're Opted In Google Play Protect.You Can Read This Guide Here.
2.)Install Apps Only From Google Play Store.
3.)Keep Unknown Sources Disabled While Not Using It Which Prevent Installation Of Apps Outside Of Play Store.
4.)Keep Your Android Update.

So, Google Play Protect Is A Great Spyware, Malware Killer Tool Which Protect Your Android From These Apps.So Make Sure Turn It On Always.

For More Android News, Updates-
Like Us On Facebook-MrGuider
Follow On Twitter-@techhuntr
Source-Google