DroidBot ka qen\u00eb aktiv q\u00eb nga qershori 2024 si nj\u00eb platform\u00eb malware-as-a-service (MaaS). Kriminel\u00ebt q\u00eb duan t\u00eb p\u00ebrdorin DroidBot paguajn\u00eb nj\u00eb tarif\u00eb abonimi mujor prej 3000 dollar\u00ebsh.<\/p>\n\n\n\n
Deri m\u00eb tani, jan\u00eb identifikuar 17 grupe q\u00eb p\u00ebrdor\u00ebn malware p\u00ebr sulme me ndihm\u00ebn e krijuesve t\u00eb malware. Infeksione malware jan\u00eb zbuluar n\u00eb t\u00eb gjith\u00eb Mbret\u00ebrin\u00eb e Bashkuar, Itali, Franc\u00eb, Turqi dhe Gjermani, por Cleafy paralajm\u00ebron se ka indikacione p\u00ebr p\u00ebrpjekje p\u00ebr t\u00eb p\u00ebrhapur malware n\u00eb rajone t\u00eb reja.<\/p>\n\n\n\n
Zhvilluesit e DroidBot me shum\u00eb mund\u00ebsi jan\u00eb turq, t\u00eb cil\u00ebt u ofrojn\u00eb bashk\u00ebpun\u00ebtor\u00ebve t\u00eb gjitha mjetet e nevojshme p\u00ebr t\u00eb kryer sulme. Kjo p\u00ebrfshin vet\u00eb malware, server\u00ebt e komand\u00ebs dhe kontrollit (C2) dhe nj\u00eb panel qendror administrativ nga i cili ata mund t\u00eb kontrollojn\u00eb operacionet e tyre, t\u00eb marrin t\u00eb dh\u00ebna t\u00eb vjedhura dhe t\u00eb l\u00ebshojn\u00eb komanda.<\/p>\n\n\n\n
Deg\u00eb t\u00eb shumta punojn\u00eb n\u00eb t\u00eb nj\u00ebjt\u00ebn infrastruktur\u00eb C2. Secilit grup iu caktua nj\u00eb identifikues unik, i cili lejoi Cleafy t\u00eb identifikonte 17 grupe duke p\u00ebrdorur malware.<\/p>\n\n\n\n
Zhvilluesit lejojn\u00eb filialet t\u00eb personalizojn\u00eb, DroidBot p\u00ebr t\u00eb sulmuar aplikacione specifike dhe gjuh\u00eb t\u00eb ndryshme, t\u2019u ofrojn\u00eb atyre mb\u00ebshtetje teknike dhe qasje n\u00eb nj\u00eb kanal Telegram ku p\u00ebrdit\u00ebsimet postohen rregullisht. N\u00eb p\u00ebrgjith\u00ebsi, DroidBot MaaS \u00ebsht\u00eb krijuar n\u00eb at\u00eb m\u00ebnyr\u00eb q\u00eb edhe kriminel\u00ebt kibernetik\u00eb t\u00eb pap\u00ebrvoj\u00eb mund ta p\u00ebrdorin at\u00eb.<\/p>\n\n\n\n
DroidBot shpesh maskohet si Google Chrome, Google Play Store ose \u201cAndroid Security\u201d. N\u00eb t\u00eb gjitha rastet, DroidBot vepron si nj\u00eb Trojan q\u00eb p\u00ebrpiqet t\u00eb vjedh\u00eb informacione t\u00eb ndjeshme nga aplikacionet.<\/p>\n\n\n\n
Malware mund t\u00eb regjistroj\u00eb goditjet e tasteve t\u00eb viktim\u00ebs, t\u00eb shfaq\u00eb faqe t\u00eb rreme hyrjeje p\u00ebrmes nd\u00ebrfaqeve t\u00eb aplikacioneve bankare, t\u00eb p\u00ebrgjoj\u00eb mesazhet SMS, ve\u00e7an\u00ebrisht ato q\u00eb p\u00ebrmbajn\u00eb fjal\u00ebkalime nj\u00eb her\u00eb (OTP) p\u00ebr aplikacionet bankare, t\u00eb lejoj\u00eb sulmuesit t\u00eb shikojn\u00eb dhe kontrollojn\u00eb n\u00eb distanc\u00eb pajisjen e infektuar, t\u00eb ekzekutojn\u00eb komanda dhe t\u00eb zbehin ekrani p\u00ebr t\u00eb fshehur aktivitetin keqdash\u00ebs.<\/p>\n\n\n\n
DroidBot shfryt\u00ebzon sh\u00ebrbimet e qasjes s\u00eb Android p\u00ebr t\u00eb gjurmuar se \u00e7far\u00eb po b\u00ebn viktima n\u00eb pajisje dhe simulon l\u00ebvizjet e rr\u00ebshqitjes dhe prekjes.<\/p>\n\n\n\n
Nd\u00ebr 77 aplikacionet p\u00ebr t\u00eb cilat DroidBot po p\u00ebrpiqet t\u00eb vjedh\u00eb fjal\u00ebkalime jan\u00eb Binance, KuCoin, BBVA, Unicredit, Santander, Metamask, BNP Paribas, Credit Agricole, Kraken dhe Garanti BBVA.<\/p>\n\n\n\n
P\u00ebrdoruesit e Android k\u00ebshillohen t\u00eb shkarkojn\u00eb aplikacione vet\u00ebm nga Google Play, t\u00eb rishikojn\u00eb k\u00ebrkesat p\u00ebr leje pas instalimit dhe t\u00eb kontrollojn\u00eb n\u00ebse Play Protect \u00ebsht\u00eb aktiv n\u00eb pajisjet e tyre.<\/p>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
DroidBot ka qen\u00eb aktiv q\u00eb nga qershori 2024 si nj\u00eb platform\u00eb malware-as-a-service (MaaS). Kriminel\u00ebt q\u00eb duan t\u00eb p\u00ebrdorin DroidBot paguajn\u00eb nj\u00eb tarif\u00eb abonimi mujor prej 3000 dollar\u00ebsh. Deri m\u00eb tani, jan\u00eb identifikuar 17 grupe q\u00eb p\u00ebrdor\u00ebn malware p\u00ebr sulme me ndihm\u00ebn e krijuesve t\u00eb malware. Infeksione malware jan\u00eb zbuluar n\u00eb t\u00eb gjith\u00eb Mbret\u00ebrin\u00eb e Bashkuar,<\/p>\n","protected":false},"author":4,"featured_media":21497,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[38],"tags":[40],"class_list":{"0":"post-21496","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-tech","8":"tag-featured"},"yoast_head":"\n