Malicious Apps Caught Secretly Turning Android Phones into Proxies for Cybercriminals
There are a number of malicious Android apps available on the Google Play Store that use the operating system to turn mobile devices into residential proxies (RESIPs) for other threat actors.
The research was conducted by HUMAN's Satori Threat Intelligence team, which discovered that the VPN apps were equipped with a Golang library that secretly turned the user's device into a proxy node.
The corporation has given the operation the codename PROXYLIB. Google has since deleted the aforementioned 29 apps.
By directing users' internet traffic through an intermediate server, residential proxies, a network of proxy servers derived from real IP addresses supplied by internet service providers (ISPs) read more Malicious Apps Caught Secretly Turning Android Phones into Proxies for Cybercr...