Share on LinkedInShare on LinkedIn

ARTICLE · 27 JUNE 2022

Ankura CTIX FLASH Update - June 24, 2022

The fraudulent applications were not available in the Google Play or the Apple App Store, and each device type has its own attack method.

United StatesTechnology

Ransomware/Malware Activity

Spyware Vendor RCS Labs Observed Infecting Android and iOS users with Commercial Surveillance Tools

Google's Threat Analysis Group (TAG) published a report regarding RCS Labs' activity involving infecting Android and iOS users with commercial surveillance tools. RCS Labs is an Italian spyware company that leveraged Internet service providers (ISPs) to infect users located in Italy and Kazakhstan. The observed campaigns originated with unique links sent to the targets via SMS that rendered a page prompting the user to download and install a malicious application on their Android or iOS device. The SMS message typically included a prompt regarding mobile connectivity issues. Researchers noted the reason behind this specific verbiage may be because "the actors worked with the target's ISP to disable the target's mobile data connectivity." The malicious applications were typically disguised as a mobile carrier application or

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

See more popular content from