GhostCtrl Backdoor Worm Can Hijack Your Android Device to Spy on You: Trend Micro

Advertisement
By Shubham Verma | Updated: 18 July 2017 19:41 IST
Highlights
  • Researchers have found the a new malware called GhostCtrl
  • It secretly takes full control of a device’s functionalities
  • It can also reset passwords and change other important settings
GhostCtrl Backdoor Worm Can Hijack Your Android Device to Spy on You: Trend Micro

Google's Android platform has in the past been victim to a host of malware, ransomware, and malicious attacks. In the recent past, reports related to malware named CopyCat, LeakerLocker, and SpyDealer were making the rounds of the Internet, and now we have been acquainted with a new attack vector, known as GhostCtrl. Cyber-security analysts at Trend Micro have revealed a backdoor worm that stealthily control several functionalities of infected Android devices. If this doesn't sound alarming enough, the researchers have further added that this vulnerability will continue to evolve while secretly recording audio or voice and send to the attacking server in an encrypted manner.

The researchers have explained that the GhostCtrl Android malware has three versions wherein the first can pilfer device information and control some of its functionalities, the second can add more features to favour an imminent device hijack, and the third combines the best of the earlier two and adds more features. Notably, the GhostCtrl worm is an extension of the vulnerability that impacted Israeli hospitals earlier and the ill-famed OmniRAT platform that was in news way back in 2015 for claiming massive exploits and remote-controlling Windows, Linux, and Mac systems via any Android device and vice versa.

The GhostCtrl backdoor masquerades as a legitimate app such as WhatsApp, and the popular Pokemon Go. As soon as the app is launched, it progresses to install a malicious APK package under the hood. The malicious APK is actually concealed under a wrapper APK, which will ask the user to install it. After this is executed, the attackers will be able to retrieve all the data and take the control of the device by harnessing a range of commands without the user's acknowledgement.

The Trend Micro report highlights some of the commands/ executable actions that allows the attackers to manipulate the device's functionalities. Besides controlling basic functions on the devices, the GhostCtrl can also reset passwords, change and play different sounds on the device. "The data GhostCtrl steals is extensive, compared to other Android info-stealers. Besides the aforementioned information types, GhostCtrl can also pilfer information like Android OS version, username, Wi-Fi, battery, Bluetooth, and audio states, UiMode, sensor, data from camera, browser, and searches, service processes, activity information, and wallpaper," reads the report.

Advertisement

In order to curb the GhostCtrl and other similar worms, Trend Micro has detailed a list of measures that the user should take to ensure data safety. A few of them include updating the device to the latest firmware, backing up the data within certain intervals, and restricting user permissions for apps. Users can also switch to multi-layered security mechanisms for better data management.

 

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.

Advertisement

Related Stories

Popular Mobile Brands
  1. Apple's M4 Mac Mini Price in India Drops to Rs. 49,999 With These Discounts
  2. Poco F7 Design Spotted in Leaked Renders; Battery Specifications Revealed
  3. Nothing Phone 3 Surfaces on Walmart Website Which Reaffirms Its US Launch
  4. Here's When Samsung Might Launch the Galaxy Z Fold 7 and Z Flip 7
  5. OnePlus Pad Lite Design and Specifications Leaked, Could Launch Soon
  6. Lenovo Yoga Slim 7i Aura Edition Review: A Premium All-Rounder with a Few Rough Edges
  1. Good Wife OTT Release: When and Where to Watch Tamil Legal Drama Online?
  2. Jinn - The Pet OTT Release Date: When and Where to Where to Watch Tamil Horror-Comedy Online?
  3. DD Next Level Now Streaming: Know Where to Watch This Tamil Horror-Comedy
  4. Nothing Phone 3 Listed on Walmart Website, Reaffirming Its Launch in the US
  5. OnePlus Pad Lite Design and Key Specifications Leaked, Could Launch Soon
  6. Samsung's Upcoming Running Events Reportedly Hint at Galaxy Z Fold 7, Flip 7 and Watch 8 Series Launch Timeline
  7. Poco F7 Design Spotted in Leaked Renders; Battery Specifications Revealed via Flipkart
  8. Neuralink Device Helps Monkey See Something That’s Not There
  9. Apple's Mac Mini With M4 Chip Price in India Drops to Rs. 49,999 With Discounts on Amazon
  10. Samsung Galaxy M36, Galaxy F36 Spotted on Google Play Console; Galaxy M36 Launch Reportedly Teased via Amazon
Gadgets 360 is available in
Download Our Apps
Available in Hindi
© Copyright Red Pixels Ventures Limited 2025. All rights reserved.