Security News > 2021 > February > Android Devices Hunted by LodaRAT Windows Malware
A newly discovered variant of the LodaRAT malware, which has historically targeted Windows devices, is being distributed in an ongoing campaign that now also hunts down Android devices and spies on victims.
Along with this, an updated version of LodaRAT for Windows has also been identified; both versions were seen in a recent campaign targeting Bangladesh, researchers said.
While previous versions of LodaRAT contained credential-stealing capabilities that researchers speculated were used for draining victims' bank accounts, these newer versions come with a full roundup of information-gathering commands.
The Android version of the LodaRAT malware, which researchers call "Loda4Android," is "Relatively simple when compared to other Android malware," said researchers.
The underlying command-and-control protocol follows the same design pattern as the Windows version, said researchers - suggesting that the C2 code will be able to handle both versions.
The new version of the LodaRAT that targets Windows systems is version 1.1.8.
News URL
https://threatpost.com/android-devices-lodarat-windows/163769/
Related news
- Russia targets Ukrainian conscripts with Windows, Android malware (source)
- TrickMo malware steals Android PINs using fake lock screen (source)
- North Korean ScarCruft Exploits Windows Zero-Day to Spread RokRAT Malware (source)
- Android malware "FakeCall" now reroutes bank calls to attackers (source)
- New FakeCall Malware Variant Hijacks Android Devices for Fraudulent Banking Calls (source)
- New Android Banking Malware 'ToxicPanda' Targets Users with Fraudulent Money Transfers (source)
- New SteelFox malware hijacks Windows PCs using vulnerable driver (source)
- New CRON#TRAP Malware Infects Windows by Hiding in Linux VM to Evade Antivirus (source)
- Cyber crooks push Android malware via letter (source)