The attacker can build Spymax malware from the Build menu. Spymax RAT on an attacker’s computer The malicious app (malware) Of course, Spymax RAT comes with a Command and Control Server (C&C), which allows the attacker to send commands to the malware. The main window displays the connected victims and allows the attacker to execute attacks with a right click. The VM and both devices are connected to an access point running on my host. I also used 2 devices to simulate victims: The first is a rooted Nexus 5 device running Android 8, and the other is a Pixel 4a device running Android 10. Both versions run on Windows only, therefore I ran them on a Windows 10 Virtual Machine. In my research I used Spymaxv2 and Spymaxv4 RAT. However, my attacks on an Android 10 device were also successful. Moreover, Spymax works pretty well on Android 9 and below. None of these attacks require root privileges, therefore they work successfully on unrooted devices. Execute some commands on the victim’s phone.Capture user’s SMS, contacts, installed apps, and call logs.Upload and download files from the mobile device.
Capture live audio from the phone’s microphone.Stream live video from the phone’s cameras.But keep in mind that these “cracked” Spymax versions are probably not the original RAT and that they probably contain other malware that might infect the attacker’s computer. Any inexperienced attacker can install the “cracked” Spymax RAT on their computer and rely on their social engineering skills to infect victims’ phones. Its 4th version Spymaxv4 can be easily downloaded from several forums and websites. It is alarming that Spymax RAT is widely available on the internet. Attackers exploited the panic to trick victims to install COVID-related apps injected with Spymax malware. Remember 2020? Probably not your favorite year, unless you’re a Corona virus. Reports about Spymax go back to at least 2019, but it got more popular in 2020. In this blogpost, I show the capabilities of this RAT and analyze how its Android malware works. It is powerful, widely available, and does not require root privileges on the victim’s device. Once the malware is installed on a phone, the attacker can execute many attacks that highly impact the confidentiality and integrity of the victim’s data, as well as the victim’s privacy. Spymax is a mobile Remote Administration Tool (RAT) that enables an attacker to control victims’ devices through an Android malware.
0 kommentar(er)
