download the new version for android Pipette 23.6.13

The fake app store requiring a coupon code for downloading malware In cooperation with we recognized the malware to be part of the APT-C-23 arsenal.įigure 4.

According to the VirusTotal service, no security vendor besides ESET detected the sample at the time. In April 2020, tweeted about a new Android malware sample. Lookout published an analysis of another version of the malware, named Desert Scorpion, in April 2018, and at the beginning of 2020, Check Point Research reported new mobile malware attacks attributed to the APT-C-23 group. In the same year, Palo Alto Networks, Lookout and Trend Micro described other versions of the mobile malware, naming them VAMP, FrozenCell and GnatSpy, respectively. The group’s activities were first described by Qihoo 360 Technology in March 2017 under the name Two-tailed Scorpion. One of the ways the spyware is distributed is via a fake Android app store, using well-known apps as a lure. In the same year, multiple analyses of APT-C-23’s mobile malware were published.Ĭompared to the versions documented in 2017, Android/Sp圜23.A has extended spying functionality, including reading notifications from messaging apps, call recording and screen recording, and new stealth features, such as dismissing notifications from built-in Android security apps.

The APT-C-23 group is known to have used both Windows and Android components in its operations, with the Android components first described in 2017. ESET products detect the malware as Android/Sp圜23.A. We have discovered a previously unreported version of Android spyware used by APT-C-23, a threat group also known as Two-tailed Scorpion and mainly targeting the Middle East. ESET researchers uncover a new version of Android spyware used by the APT-C-23 threat group against targets in the Middle East

Download the new version for android Pipette 23.6.13