A vast campaign to steal personal data from smartphones has been spotted by cybersecurity experts. The malware is programmed to infect Android devices.
Updates are not just a simple, somewhat restrictive formality, they can save your privacy as well as your banking data. The cybersecurity company CheckPoint warns in a report published this June about a smartphone hacking campaign, which traps phones with old versions of Android. The infection methods are multiple: SMS, fake site, WhatsApp message.
« Victims are tricked into downloading what appears to be a legitimate application, but instead they install Rafel RAT, a Trojan, and grant it permissions.s. Check Point CPR also discovered victims who engaged in conversations with WhatsApp accounts that provided them with these apps », Tells us Alexander Chailytko, cybersecurity manager at Check Point Software Technologies.
Once the fake app is installed, hackers will be able to inject numerous malware, depending on their objectives: spy on your phone to steal private information, banking data or blackmail you.
This remote access Trojan, called Rafel RAT, has already been deployed in more than 120 campaigns over the past two years, many of which are still active. The victims were located in the United States, China, Russia, India, but also in France where many smartphones were targeted.
Which versions of Android are likely to be infected?
Overall, all smartphones with versions prior to Android 14 are susceptible to infection. We still recommend installing the latest generation, Android 15, to ensure you are safe, before cybercriminals update their own software. All smartphone brands, however, are vulnerable to this infection.
Researchers note that malware can take the form of messaging apps (WhatsApp, Instagram), finance services (PicPay, RM Trade), or alternatives to Google Play (BlackMart).
If you are unable to install the update, be careful about the apps you install. Stick to what is offered on Google Play. If you come across a button to install from a site, search for the app in question on Google’s platform instead of downloading directly from the web.
Want to know everything about tomorrow’s mobility, from electric cars to e-bikes? Subscribe now to our Watt Else newsletter!
