DoNot Firestarter Android Malware is Using Google Firebase Cloud Messaging to Infect Devices: Cisco Report


DoNot Firestarter is a newly detected malware on Android that is reportedly using Google’s own infrastructure to deliver malware. According to Cisco’s Talos cybersecurity researchers, Firestarter uses Google’s Firebase Cloud Messaging infrastructure to control the malware. Using Google’s infrastructure allows the malware to hide amidst legitimate Internet traffic, and also allows the malware to be targeted in a personalised manner, making it even harder for security researchers to detect.

Analysis of DoNot’s activities by cyber threat researchers at Cisco Talos says that the group tries to specifically target government officials in Pakistan, and NGOs working in Kashmir.

The loader is usually disguised as an application that a user is lured into installing. The app then contains additional code that is used to download the payload, based on the information gained from the device. This could be used — for example — to create an app that is innocuous in the rest of the world but acts as malware in a specific geography.

The malware then transmits personal and geographical information about the device to DoNot’s C2, or its command centre, which helps the group identify the user and decide whether or not to infect the device. The researchers said that by using Google FCM, the malware can receive a malicious package from the DoNot C2 in the form of a link, which would give the group access to the device. And even if a particular C2 was to be taken down, access through the Google FCM would allow the group to infect the device using a different C2, making this loader particularly dangerous and difficult to weed out.
The only way to neutralise the threat, researchers say, would be for Google to take down the infected FCM account, along with the C2. The analysis also says that being specific in targeting users, the DoNot Firestarter malware is hard to be detected and categorised by security researchers.


Is Android One holding back Nokia smartphones in India? We discussed this on Orbital, our weekly technology podcast, which you can subscribe to via Apple Podcasts, Google Podcasts, or RSS, download the episode, or just hit the play button below.

For the latest tech news and reviews, follow Gadgets 360 on Twitter, Facebook, and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel.

Veer Arjun Singh
Veer Arjun Singh is Deputy Editor, News at Gadgets 360. He has written many in-depth features on technology, healthcare, hospitality, and education in the last seven years, besides reviewing latest gadgets across categories. He has also profiled CXOs, entrepreneurs, social workers, lawyers, chefs, and musicians. You can find him as @arjunwadia on Twitter or email him at [email protected] with tips, suggestions, and general observations.
More

Oppo K7x Geekbench Listing, Official Teaser Reveal Key Specifications Ahead of November 4 Launch





Source link

Latest articles

Nokia 10 PureView (not the official name) has been tipped to come with the upcoming Snapdragon 875 SoC. The phone that will likely...

DoNot Firestarter Android Malware is Using Google Firebase Cloud Messaging to Infect Devices: Cisco Report

DoNot Firestarter is a newly detected malware on Android that is reportedly using Google's own infrastructure to deliver malware. According to Cisco's...

Heart Diet: Omega 3-Rich Foods Are Good For Heart Patients: Study Claims; 5 Foods You Can Eat

Diet rich in Omega 3 fatty foods can be beneficial for heart health.Cardiovascular diseases are the leading cause of deaths across the globe....
Read more

Voting For Chhattisgarh’s Marwahi Bypoll On Tuesday, 8 Candidates In Fray

Some 1,400 security personnel have been deployed for the bypoll. (Representational)Raipur: Voting for the Marwahi assembly bypoll in Chhattisgarh would be held...
Read more
44.1k Followers
Follow
Previous articleHeart Diet: Omega 3-Rich Foods Are Good For Heart Patients: Study Claims; 5 Foods You Can Eat
Next articleNokia 10 PureView Tipped to Feature Snapdragon 875 SoC, Sapphire Glass Display, Stainless Steel Frame

Related articles

Leave a reply

Please enter your comment!
Please enter your name here