Title: Roaming Mantis implements new DNS changer in its malicious mobile app in 2022

Published:  Thu, 19 Jan 2023 10:00:06 +0000

Description: Roaming Mantis (a.k.a Shaoye) is a long-term cyberattack campaign that uses malicious Android package (APK) files to control infected Android devices and steal data. In 2022, we observed a DNS changer function implemented in its Android malware Wroba.o.

Read full article on SECURELIST.COM