Researchers discover new Zombinder service threat

Researchers have uncovered Zombinder service, which enables cybercriminals to easily embed malware into legitimate apps and steal data.

ThreatFabric researchers discovered the new threat called Zombinder, which allows cybercriminals to attach malicious software to legitimate Android apps, having a devastating impact on the device.

According to a ThreatFabric report, the attacks involve the use of various malware such as ERMAC, Erbium, Aurora, and Laplas to steal personal identifiable information, grab emails from the Gmail app, spy on two-factor authentication codes, and steal seed phrases from various crypto wallets.

As a lure to push various malware families, the campaign impersonates Wi-Fi authorization portals, ostensibly assisting users in accessing internet points. The site then prompts the user to download a Windows or Adware version of the application, which is actually malware.

As a result, after downloading the bound application, the app will function normally. Then display a message informing you that it needs to be updated. The app will install the Ermac malware once the victim accepts this update.

Under the guise of a VidMate application, the Zombinder service has also been spreading the Xenomorph banking malware. The modified application is advertised and downloaded from a malicious website that mimics the application’s original website, with the victim tricked into visiting the site via malicious ads.

The sources for this piece include an article in TheHackerNews.

IT World Canada Staff
IT World Canada Staff
The online resource for Canadian Information Technology professionals.

Would you recommend this article?


Thanks for taking the time to let us know what you think of this article!
We'd love to hear your opinion about this or any other story you read in our publication.

Jim Love, Chief Content Officer, IT World Canada

Featured Download

ITW in your inbox

Our experienced team of journalists and bloggers bring you engaging in-depth interviews, videos and content targeted to IT professionals and line-of-business executives.

More Best of The Web