• Skip to main content
  • Skip to primary sidebar
  • Skip to footer

Technologous - Managed IT Solutions Bryan/College Station

  • Home
  • About
    • Areas We Serve
    • Our Leadership
      • Chris Dawson
      • Ian Soares
  • IT Services
    • Managed IT
    • Support IT
    • Cloud IT
  • Blog
  • Request a Consultation
  • Contact
You are here: Home / Blog / GravityRAT Malware Targets Mac And Android Users

GravityRAT Malware Targets Mac And Android Users

GravityRAT Malware Target Mac And Android Users

GravityRAT Malware targets Mac and Android Users. Malware comes in all shapes and sizes that can copy, encrypt files or serve up annoying ads. Still, other malware work quietly in the background, mining this or that cryptocurrency using your computer’s processing power to do it.

GravityRAT is a different sort of malware that targets Mac and Android users. It has been active development since at least 2015 by Pakistani hacker groups and has been used primarily against India’s military installations. As such, it’s not the sort of malware your IT staff is likely to have a face to face encounter with unless you’re doing contract work with the Indian military. It is interesting, however, and worth taking a closer look.

GravityRAT design is primarily to check the CPU temperature of Windows-based machines and to detect the presence of sandboxes or virtual machines so that its controllers would know what type of environment they were operating in.

Recently, security researchers at Kaspersky Lab discovered new strains of GravityRAT with designs to work on both Android and Apple Mac devices. The GravityRAT development team has also been quietly updating the capabilities of their malicious code.

As of the latest build, in addition to the two things above, the malware can:

  • Generate a list of a running process
  • Log keystrokes
  • Get basic system information
  • Take screenshots at predefined intervals
  • Scan ports
  • Conduct searches for certain file extensions
  • Execute arbitrary shell commands

Out of all these, it is the last one that makes GravityRAT genuinely dangerous, as there is any number of exploits the hackers could use here. The team is building toward a specific goal, but so far, we can only guess at what that goal might be.

In any case, the designs of GravityRAT are much more robust than anything that’s come before it, and it’s a good bet that the team is getting close to whatever finish line they are setting for themselves. After that, there’s no telling what they might use their new tool.

October 31, 2020 Filed Under: Blog Tagged With: GravityRat Malware, Tech Guru

Primary Sidebar

GET OUR BLOG IN YOUR EMAIL!

Archives

  • November 2020
  • October 2020
  • September 2020
  • August 2020
  • July 2020
  • June 2020
  • April 2020
  • March 2020
  • February 2020
  • December 2019
  • November 2019
  • October 2019
  • September 2019
  • August 2019
  • July 2019
  • June 2019
  • May 2019
  • April 2019
  • March 2019
  • February 2019
  • January 2019
  • December 2018
  • August 2018

Tags

adobe android App Apple attack Attacks Breach Browser Chrome Compromised Credit Card Dark Web Data Database Data Breach Email Facebook gmail Google government hacker Hackers information Internet iOS iPhone malware Microsoft Microsoft Windows 10 office 365 Password Passwords patch Phishing ransomeware Ransomware Scam security Social Media Update Vulnerability Vulnerable Wifi Windows Windows 10

Footer

Contact Us

Address: 3091 University Drive, Unit 210, Bryan, Texas 77802
Phone: 979-217-1226

Our Blog

  • Resolution for Windows 10 Drawing Apps November 24, 2020
  • Older Android Phones May Have Site Loading Issues In 2021 November 23, 2020
  • Apple’s Update for Zero-Day November 20, 2020
  • Luxottica Patient Information Breached November 20, 2020
  • Verizon Ends Yahoo Email Forwarding November 19, 2020

Search

Follow Us

  • Facebook
  • Home
  • About
  • Resources
  • Contact
  • Our Leadership
  • Why Choose Us?
  • IT Services
  • Request a Consultation

Copyright © 2021| All Rights Reserved | Powered By Technologous, LLC | Log in