Malware alert! Indian researchers uncover DogeRAT malware campaign. How to protect your device

As per a report by India Today, CloudSEK’s TRIAD team came across the DogeRAT malware while investigating an SMS stealer scam campaign. 

The researchers found that this newly discovered malware is an open-source Android malware designed to target individuals across various industries, with a particular focus on banking, financial services and insurance (BFSI), e-commerce, and entertainment sectors. Although the primary targets of this cyber campaign are Indian users, the intention is to extend its reach globally.

The DogeRAT malware, as per CloudSEK, disguises itself as legitimate mobile applications, including popular ones like Netflix and YouTube, as well as games and productivity tools. It is then distributed through social media platforms and messaging apps such as Telegram.

Once successfully installed, the malware has the capability to extract sensitive information from the victim’s device, including contacts, messages, and banking credentials. Furthermore, it grants remote access to the device, allowing hackers to carry out malicious actions like sending spam messages, unauthorized payments, file modifications, call record viewing, and even capturing photos using both the front and rear cameras of the compromised device.

CloudSEK, in its official statement, shared further insights into the distribution methods of the CloudSEK malware. The primary mode of spreading the malware involves sharing links on social media platforms. These links are typically transmitted through direct messages or posted as spam comments on various posts. Additionally, messaging platforms are also utilized to distribute the malware.

During the investigation, CloudSEK uncovered that an upgraded version of the DogeRAT malware is being promoted through Telegram channels. This premium version offers additional functionalities such as screenshot capturing, image theft, keylogging, and more. Surprisingly, the premium version of DogeRAT is available for as little as ₹2,500.

CloudSEK also mentioned that the author of DogeRAT has established a GitHub repository where the RAT (Remote Access Trojan) is hosted. Alongside the repository, there is a video tutorial and a comprehensive list of features and capabilities provided by the RAT.

While malware attacks are not a new phenomenon, there has been a noticeable surge in these malicious activities over recent months. It is crucial to stay informed about the latest threats and take appropriate measures to safeguard your devices against potential malware infections.

To protect yourself from such malicious threats, it is recommended to follow these precautionary steps:

Exercise caution when dealing with links and attachments sent by unknown individuals. It is prudent to avoid clicking on them as they may contain malware or redirect you to unsafe websites.

Regularly update your software, including operating systems and applications. These updates often include security patches that strengthen your device’s defense against malware.

Invest in reputable security solutions that offer real-time protection against malware and other types of threats. Such software serves as a vital safeguard for your device.

Be cautious of scams that employ tactics like creating urgency, fear, or greed to deceive victims. If you receive suspicious messages or offers on social media, refrain from clicking on any links or opening attachments until you can verify their authenticity.

Educate yourself about malware and familiarize yourself with common attack techniques. Understanding how these cyber threats operate will empower you to better protect yourself from falling victim to them.

Updated: 31 May 2023, 03:06 PM IST