‘Internet providers mediate the distribution of spyware on Android and iOS’ |

Google of the company Google Threat Analysis Group (GTAG) revealed a new hacker campaign as a result of research conducted by specialists of the department. Internet providers hackers as part of a new hacker campaign revealed Hermit assisted in the distribution of spy software called. Google This study was conducted by Lookout of a company called information confirmed the results of previous research by security experts. So those experts have a spy software called Hermit from Italy RCS Labs had contacted a company called. According to Lookout, RCS Labs develops spyware and sells it to government agencies in various countries. Experts have found signs that the Hermit software is already being used by the Kazakh and Italian governments.

According to a report by Lookout, Hermit acts as a dangerous tool and can install additional modules to expand its capabilities if necessary. This software can retrieve phone call logs, locate the smartphone, take photos in the smartphone memory, video, can steal text messages and other files. In addition, Hermit can record incoming calls to your smartphone and even intercept them. The capabilities of this software are not limited to this. Thus, Hermit can gain superuser rights on the victim’s smartphone. This, in turn, means full control of the smartphone’s operating system. According to the report, Hermit Android and iOS can be used to carry out cyber attacks against users of devices running through. Hermit on a smartphone is usually disguised as a legitimate application of the mobile operator or messenger.

Those internet providers blocked the victims’ internet connections. This is an important step in integrating malware into the device. After disconnecting from the Internet, hackers contact the user on behalf of the mobile operator and recommend downloading the legitimate application of the mobile operator. Allegedly, this application, in turn, will help to restore the Internet connection. According to GTAG and Lookout, Hermit never Google Play Market and App Store has not been disseminated through official sources such as But hackers Apple Developer Enterprise Program managed to spread the malware on iOS. Apple The Developer Enterprise Program, in turn, allows applications to bypass the standard verification process in the App Store and obtain certificates that meet the requirements of the application store. Apple has already blocked user accounts associated with Hermit and revoked issued certificates.