ESET Research discovered and investigated a sophisticated malicious cryptocurrency scheme that targets mobile devices running Android or iOS (iPhones).

The attacker first creates a Telegram account and a Telegram ‘bot.’ A Telegram bot account is a special remote account with which users can interact by Telegram chat or by adding them to Telegram groups, or by sending requests directly from the input field by typing the bot’s Telegram username and a query.

As the U.S. heads into one of the most perilous phases […]

The new spyware, detected by ESET security products as Android/SpyC23.A, builds upon previously reported versions with extended espionage functionality, new stealth features and updated C&C communication.