Without the ability to detect and stop suspicious behavior, these millions of Android devices and the data on them remain exposed. For example, groups can pool device resources to create powerful botnets, they can create databases of devices to conduct highly-targeted attacks, or they can build new streams of revenue by selling access to devices under their control to the highest bidder. This steady stream of cash, coupled with a focused organizational structure, proves cyber criminals can easily become financially self-sufficient.Įmboldened by this independence, Yingmob and groups like it can focus on honing their skill sets to take malware campaigns in entirely new directions, a trend Check Point researchers believe will escalate. You can play all video and audio formats without the need for external codex packages. Yingmob uses HummingBad to control 85 million devices globally to generate $300,000 per month in fraudulent ad revenue. QQ Media Player software is a free application that helps you play videos, movies and music. – Both install fraudulent apps to gain revenue – HummingBad repositories contain QVOD documentation, an iOS porn player targeted by Yispecter – HummingBad and Yispecter share C&C server addresses – Yispecter uses Yingmob’s enterprise certificates to install itself on devices
Other research firms have associated Yingmob with an iOS malware called Yispecter, but the evidence Check Point researchers found confirms the same group is also behind HummingBad: The group is highly organized with 25 employees that staff four separate groups responsible for developing HummingBad’s malicious components.
Yingmob runs alongside a legitimate Chinese advertising analytics company, sharing its resources and technology.
0 kommentar(er)
