Roaming Mantis' New DNS Changer Function to Target Public Routers
Roaming Mantis campaigns got a makeover with a DNS changer function. Using this feature, adversaries can illegally manage all communications from devices via compromised Wi-Fi routers.
Threat actors associated with the Roaming Mantis attack campaign have been observed delivering an updated variant of their patent mobile malware known as Wroba to infiltrate Wi-Fi routers and undertake Domain Name System (DNS) hijacking.
https://thehackernews.com/2023/01/roaming-mantis-spreading-mobile-malware.html #CyberSecurity #DNSHighjacking #Wifi #routers #RoamingMantis
Roaming Mantis Spreading Mobile Malware That Hijacks Wi-Fi Routers' DNS Settings
Roaming Mantis spreading updated Wroba mobile malware that hijacks DNS settings of connected Wi-Fi routers for malicious attacks.
Wroba Mobile Banking Trojan Spreads to the U.S., via Texts
The Roaming Mantis group is targeting the States with a malware that can steal information, harvest financial data and send texts to self-propagate.
FakeSpy Android Malware Spread Via ‘Postal-Service’ Apps
New ‘smishing’ campaigns from the Roaming Mantis threat group infect Android users with the FakeSpy infostealer.
DarkOperator 🚀
Bob Carver
ITSEC News