Gamaredon Deploys Android Spyware “BoneSpy” and “PlainGnome” in Former Soviet States
Two new Android spyware tools, BoneSpy and PlainGnome, have been linked to the Russia-affiliated state-sponsored threat actor known as Gamaredon. This is the first time the adversary has been seen utilizing malware families exclusive to mobile devices in its assault activities.
According to an investigation by Lookout, BoneSpy and PlainGnome target former Soviet states and concentrate on victims who speak Russian. Data including SMS messages, call logs, audio recordings, device location, camera images, and contact lists are all gathered by BoneSpy and PlainGnome.
Gamaredon, a hacker collective associated with Russia's Federal Security Service (FSB), is also known by the names Aqua Blizzard, Armageddon, BlueAlpha, Hive0051, Iron Tilden, Primitive Bear, Shuckworm, Trident Ursa, UAC-00...