Hackers have been targeting users in Taiwan with PJobRAT malware delivered through malicious instant messaging apps, according to new research. The malicious apps — SangaalLite and CChat — were designed to mimic legitimate platforms, according to a report published Thursday by cybersecurity firm Sophos. The apps were available for download on multiple WordPress sites, which have since been taken offline. Researchers believe the campaign has now ended or is on pause, as no recent activity has been observed. PJobRAT, an Android remote access trojan first identified in 2019, has previously been used to steal SMS messages, contacts, device information, documents and media files. In 2021, the malware was linked to attacks on Indian military personnel via fake dating and messaging apps.
Hackers target Taiwan with malware delivered via fake messaging apps (Daryna Antoniuk, The Record)
Related articles