A new Android malware, called FireScam, is stealing sensitive data and evading detection. Security experts warn that this threat is more dangerous than many others.
FireScam is designed to look like the Telegram Premium app but is actually a tool for hackers to steal your data.
How FireScam Works: FireScam is spread through a fake app store website that looks like the RuStore App Store, popular in Russia.
When users download the malware, it starts stealing data such as notifications, messages, and app details. It sends this information to a remote server.
The malware also tracks user activities like screen changes, shopping transactions, and clipboard activity.
What You Need to Know:
- FireScam uses a dropper to install itself as the Telegram Premium app.
- It collects sensitive data, including notifications and messages, and sends it to a Firebase database.
- The malware monitors device activities and captures notifications from various apps, including system apps.
Why FireScam is Dangerous: Experts say FireScam is part of a growing trend of sophisticated malware that targets Android users.
Eric Schwake from Salt Security explains that FireScam uses advanced methods to trick users into installing it and stealing their information. He also notes that these kinds of threats are becoming more common.
How to Protect Yourself:
- Be cautious when downloading apps from untrusted sources.
- Use reliable antivirus software.
- Keep your device’s software up to date.
- Avoid clicking on suspicious links or opening files from unknown sources.
