SHA1 hash:c7ec4f61ec18b106688e7c87755d2caba10f33c8
Description
A trojan application implanted into some unofficial modifications of WhatsApp messenger for Android. Malicious actors can use it to spy on users. Upon receiving commands from a C&C server, this trojan can:
- Build a list of all the available files that are stored on a device or on its SD card;
- Upload the files specified in the command to the C&C server;
- Collect information about the infected device;
- Access the phonebook;
- Eavesdrop on the surroundings by recording audio;
- Change the C&C server address.