Targeted Attack Campaign Uses Android Malware

[wraggster]

Android attacks have become all the rage in the last year or two, and targeted attacks against political activists in Tibet, Iran and other countries have been bubbling up to the surface more and more often. Now, those two trends have converged with the discovery of a targeted attack campaign that's going after Tibetan and Uyghur activists (https://www.securelist.com/en/blog/208194186/Android_Trojan_Found_in_Targeted_Attack) with a spear-phishing message containing a malicious APK file (https://threatpost.com/en_us/blogs/researchers-uncover-targeted-attack-campaign-using-android-malware-032613). Researchers say the attack appears to be coming from Chinese sources. The new campaign began a few days ago when unknown attackers were able to compromise the email account of a well-known Tibetan activist. The attackers then used that account to begin sending a series of spear-phishing messages to other activists in the victim's contact list. One of the messages referred to a human rights conference in Geneva in March, using the recipients' legitimate interest in the conference as bait to get them to open the attachment. The malicious attachment in the emails is named 'WUC's Conference.apk.'"

http://it.slashdot.org/story/13/03/26/2040236/targeted-attack-campaign-uses-android-malware