TECH

Malware Roaming Mantis started in Asia but has already arrived in Europe

In March, the Japanese press reported a virus that operated as a "Trojan horse," Roaming Mantis, which used the DNS to attack infected Android smartphones. This threat is now spreading to Asia and the rest of the world. The malware is designed to steal information such as user credentials, giving hackers control of the devices.This malware, according to researchers at Kaspersky Lab, uses a simple trick to control the DNS settings of the infected routers. Once controlled by hackers, any attempt by users to access a website is redirected to a page with a similar address, but with false content originating from hackers' servers.On this site, visitors receive a message to improve the browsing experience and are asked to install a newer version of Chrome. By accepting, users installed the application with the "Trojan Horse", giving hackers access to Android devices.Kaspersky reports that when it first detected Roaming Mantis in April, it considered it an active and rapidly changing threat.
The security expert believes hackers of Chinese or Korean origin are looking for financial profits and will not slow down their expansion in the near future. The new evidence points to a geographical expansion of malware, reaching targets in Europe and the Middle East, among other points, in 27 languages, including Portuguese. The system adds phishing options for iOS devices, as well as tools for encryption on computers.
Kaspersky recommends a need to enforce device security measures and use secure connections. To do so, users should consult the router user manual to ensure that the DNS settings have not changed, or contact the internet provider and ask to change the password of the router administrator access. This should be updated regularly from official sources, always checking the addresses of browsers that access.

Sapo