New Mazar Bot Steals and Then Wipes Your Phone's Content
Vicious malware. The mere mention of these two words is enough to set people on edge, both in the consumer and cyber security sectors. Depending on the nature of the malware, the hackers responsible for unleashing them could either hold an electronic device hostage or even act as a sleeper bug, set to activate only when the device is plugged into a target system.
Sadly, Android users have it tough this year, as Danish security firm Heimdal found and confirmed that a new malware, known as Mazar Bot, is capable of allowing attackers to control a user's Android phone, as well as access the affected device's services and information at will.
Mazar Bot starts off simply as an MMS message, containing a malicious APK file that once opened, give the hacker the aforementioned access to the phone. According to Heimdal, the message looks something like this:
“You have received a multimedia message from +[country code] [sender number] Follow the link http://www.mmsforyou [.] Net / mms.apk to view the message.”
Once the APK file is opened, it gives the attacker access to your phone's administrator rights, and will proceed to install a harmless Tor (The Onion Router), a type of software used by individuals who are usually denizens of the more nefarious Dark Net community.
Funnily enough, Heimdal stated that the Mazar Bot malware was programmed in such a way that it doesn't attack smartphone that uses Russian as the default language, a point that could point to the origins of the malware creators.
The Mazar Bot malware is the latest type of intrusion software to be created this year.