Find

Although most of the targets are located in EU countries and the UK, ESET has also seen attacks in countries such as Australia and Canada.

The legitimate Kattana trading application was rebranded – including setting up copycat websites – and the malware was bundled into its installer.

The Welcome Chat app behaves like any chat app downloaded from outside Google Play: it needs the setting “Allow installing apps from unknown sources” to be activated.

ESET Internet Security (EIS) provides advanced protection against internet threats, […]

ESET Enterprise Inspector is ESET’s Endpoint Detection and Response (EDR) tool for identification of anomalous behavior, identification of breaches, risk assessment, and further forensic investigation.

The latest tools inject malicious macros or references to remote templates into existing documents on the attacked system, which is a very efficient way of moving within an organization’s network, as documents are routinely shared amongst colleagues.

Faced with malware that displayed no additional functionality nor suspicious permissions on top of Accessibility Services, all known security mechanisms failed to trigger any alarm. As a result, DEFENSOR ID made it onto the Google Play store, stayed there for a few months and was never detected by any security vendor participating in the VirusTotal program.

“Requirements of businesses differ from those of consumers, so it’s a step in the right direction by AV-TEST to design the Android test specifically for corporate use cases,” says Jiří Kropáč, Head of Threat Detection Labs at ESET.

ESET has been included in the report as an Enterprise Architecture EDR solution, as classified by the architectural decisions behind the product that are designed to provide sub-second behavioral detection and response on the endpoint itself, improving endpoint protection capabilities and offline protection.

According to ESET findings, Ramsay has gone through several iterations based on the different instances of the framework found, denoting a linear progression on the number and complexity of its capabilities.