Over 105,000 Malware Samples IdentifiedKey Findings:Over 95% are/were unknown and unavailable malware samplesMalware hijacked OTP text messages across more than 600 global brandsApprox. 4,000 samples contained phone numbers pre-embedded within Android kit13 C&C servers used to communicate and potentially receive stolen SMS messagesOver 2,600 Telegram bots linked to campaign, serving as a distribution channelDALLAS, July 31, 2024 /PRNewswire/ -- Zimperium , the leading global provider of mobile security solutions, announces the discovery of a new and potent threat identified as the SMS Stealer. This malicious software, uncovered by Zimperium's zLabs team during routine malware analysis, has been identified in over 105,000 samples, across more than 600 global brands, highlighting its extensive reach and significant risks, including account takeovers and identity theft.The SMS Stealer threat, first identified in 2022, uses fake ads and Telegram bots posing as legitimate services to trick victims into gaining access to their SMS messages. Once access is granted, the malware connects to one of its 13 Command and Control (C&C) servers, confirms its status, and begins transmitting stolen SMS messages, including one-time passwords (OTPs).OTPs are designed to add an extra layer of security to online accounts, particularly for enterprises controlling access to sensitive data. However, the SMS Stealer's ability to intercept OTPs undermines this security feature, giving bad actors the means to gain control of victims' accounts. The malware associated with SMS Stealer remains hidden, allowing for continuous attacks.The Impact of SMS Stealer:Credential Theft: The malware can intercept and steal OTPs and login credentials, leading to complete account takeovers.The malware can intercept and steal OTPs and login credentials, leading to complete account takeovers

Cyvatar announces strategic partnership with Zimperium to expand cybersecurity portfolio.

MDR Advancement Unveiled: CyberMaxx, a managed detection and response (MDR) provider, has announced the addition of enhanced response and continuous threat exposure management capabilities to its MaxxMDR solution.