Nueva variante de androrat con mejores habilidades de robo

MEXICO CITY - Feb. 21, 2018 - PRLog -- A patched vulnerability is used to attack Android systems with a Remote Access Tool (RAT).

Studies conducted by computer security (http://www.webimprints.com/index_es.html) experts have detected a new variant of AndroRAT, which can inject root exploits, allowing attackers to access the device. AndroRAT takes advantage of CVE-2015-1805, which was made public and patched in 2016, and only affects previous Android devices.

Cybersecurity professionals comment that AndroRat was created in 2012 as a university project to allow remote access to Android devices, but hackers also found another use for it.

The specialists in computer security explain that the new variant is intended to be a utility application called TrashCleaner, which is probably distributed through a malicious URL.

The first time AndroRAT runs, it installs a calculator application labeled in Chinese that looks like the one that is usually included with any Android device. The calculator icon replaces the TrashCleaner icon. The malware can be controlled remotely, according to the reports of experts in cyber security (http://www.iicybersecurity.com/) .

Some of the new bits of theft include; theft of information from the mobile network, storage capacity, installed applications, web browsing history of pre-installed browsers, calendar of events, record of calls, upload files to the victim device, use the front camera, delete and send SMS, capture of screen, execution of shell commands and Wi-Fi passwords.