S0425 Corona Updates

malwareMobile

platformsAndroid

also known asCorona Updates · Wabi Music · Concipit1248

Corona Updates is Android spyware that took advantage of the Coronavirus pandemic. The campaign distributing this spyware is tracked as Project Spy. Multiple variants of this spyware have been discovered to have been hosted on the Google Play Store.

techniques used (15)

ATT&CK techniques this enables or maps to.

T1422System Network Configuration Discovery
T1422.001Internet Connection Discovery
T1422.002Wi-Fi Discovery
T1426System Information Discovery
T1429Audio Capture
T1430Location Tracking
T1437.001Web Protocols
T1512Video Capture
T1517Access Notifications
T1533Data from Local System
T1582SMS Control
T1636.002Call Log
T1636.003Contact List
T1636.004SMS Messages
T1639.001Exfiltration Over Unencrypted Non-C2 Protocol

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan