Through the work of researchers at ThreatFabric it was possible to identify a dangerous person trojan active in the environment Android.
This, known as Brokewellspreads via a page of a malicious site that promotes a fake Chrome update. What makes this malware so fearsome is its ability to capture almost any type of interaction of the victim with the infected smartphone.
Whether it’s about information displayed on the screenfrom the typing text or any data about the apps used, the malicious app can record any type of information and send it to the cybercriminals who manage its infrastructure.
According to experts, the developer of the trojan is a user known as Baron Samedit and which, for a couple of years, has been known in the environment for having created several tools similar to the aforementioned malware. In fact, researchers have also discovered the existence of Brokewell Android Loadera malicious app that works in synergy with the previous malware.
The Brokewell Trojan is still in development
Through the loader, cybercriminals can act by bypassing the restrictions applied by Google ad Android 13 (and later versions). In this way, it is possible to exploit Brokewell to abuse smartphone access, paving the way for the Trojan’s activities.
Making the scenario even more worrying is the fact that, according to ThreatFabric, the malware is still in development. This, proposed with the formula Malware-as-a-Service (MaaS) on the forums of Dark Webmay represent not only a current threat but also for the months to come.
To avoid infections of this type, experts have provided a series of useful tips to users. Avoid downloading apps from external sources Google Play it is a first step towards safety. Keep active PlayProtect and rely on a antivirus of proven trust are further steps necessary to consider a smartphone relatively safe.
