Connect with us

World

Microsoft Raises Alarm Over New Android Malware, ‘Toll Fraud’

Published

2 years ago

on

Researchers at Microsoft have warned Android users of malware called ‘toll fraud’ that disguises as normal apps on the Google Play Store and drains the wallet of users once installed.

Microsoft describes toll fraud malware as a subcategory of billing fraud in which malicious applications subscribe users to premium services without their knowledge or consent.

This type of malware is said to be one of the most prevalent types of Android malware – and it continues to evolve.

Compared to other subcategories of billing fraud, which include SMS fraud and call fraud, toll fraud has unique behaviours. Whereas SMS fraud or call fraud uses a simple attack flow to send messages or calls to a premium number, toll fraud has a complex multi-step attack flow that malware developers continue to improve.

Explaining how the malware operates, the researchers in a Microsoft blog post-https://www.microsoft.com/security/blog/2022/06/30/toll-fraud-malware-how-an-android-application-can-drain-your-wallet/, said,

”We saw new capabilities related to how this threat targets users of specific network operators. It performs its routines only if the device is subscribed to any of its target network operators. It also, by default, uses cellular connection for its activities and forces devices to connect to the mobile network even if a Wi-Fi connection is available.”

“Once the connection to a target network is confirmed, it stealthily initiates a fraudulent subscription and confirms it without the user’s consent, in some cases even intercepting the one-time password (OTP) to do so. It then suppresses SMS notifications related to the subscription to prevent the user from becoming aware of the fraudulent transaction and unsubscribing from the service,” they added.

How it gets to your phone

  • This type of attack starts when a user downloads an app the malware is disguised as in the Google Play Store.
  • These trojan apps will usually be listed in popular categories in the app store such as personalization (wallpaper and lock screen apps), beauty, editor, communication (messaging and chat apps), photography, and tools (like cleaner and fake antivirus apps).
  • The researchers say that these apps will ask for permissions that don’t make sense for what is being done (i.e. a camera or wallpaper app asking for SMS or notification listening privileges).

Protecting yourself against the malware

Microsoft in the security alert notes that toll fraud is one of the most common malware categories with high financial loss as its main impact. Due to its sophisticated cloaking techniques, prevention from the side of the user plays a key role in keeping the device secure.

According to the researchers, a rule of thumb is to avoid installing Android applications from untrusted sources (sideloading) and always follow up with device updates. They also recommend end-users take the following steps to protect themselves from toll fraud malware:

  • Install applications only from the Google Play Store or other trusted sources.
  • Avoid granting SMS permissions, notification listener access, or accessibility access to any applications without a strong understanding of why the application needs it. These are powerful permissions that are not commonly needed.
  • Use a solution such as Microsoft Defender for Endpoint on Android to detect malicious applications.
  • If a device is no longer receiving updates, strongly consider replacing it with a new device.
Related Topics:

World

Trump dismisses claims of handing presidency to Musk as ‘hoax’

Published

15 hours ago

on

December 23, 2024 1:06 pm

By

Could Elon Musk, who holds major sway in the incoming Trump administration, one day become president? On Sunday, Donald Trump answered with a resounding no, pointing to US rules about being born in the country.

“He’s not gonna be president, that I can tell you,” Trump told a Republican conference in Phoenix, Arizona.

“You know why he can’t be? He wasn’t born in this country,” Trump said of the Tesla and SpaceX boss, who was born in South Africa.

The US Constitution requires that a president be a natural-born US citizen.

Trump was responding to criticism, particularly from the Democratic camp, portraying the tech billionaire and world’s richest person as “President Musk” for the outsized role he is playing in the incoming administration.

As per ceding the presidency to Musk, Trump also assured the crowd: “No, no that’s not happening.”

The influence of Musk, who will serve as Trump’s “efficiency czar,” has become a focus point for Democratic attacks, with questions raised over how an unelected citizen can wield so much power.

And there is even growing anger among Republicans after Musk trashed a government funding proposal this week in a blizzard of posts — many of them wildly inaccurate — to his more than 200 million followers on his social media platform X.

Alongside Trump, Musk ultimately helped pressure Republicans to renege on a funding bill they had painstakingly agreed upon with Democrats, pushing the United States to the brink of budgetary paralysis that would have resulted in a government shutdown just days before Christmas.

Congress ultimately reached an agreement overnight Friday to Saturday, avoiding massive halts to government services.

Continue Reading

World

Seven confirmed dead in Western Mexico plane crash

Published

16 hours ago

on

December 23, 2024 11:34 am

By

At least seven people died when a light aircraft crashed Sunday in a heavily forested area of Jalisco in western Mexico, local authorities reported.

The aircraft, a Cessna 207, was flying from La Parota in the neighbouring state of Michoacan.

Jalisco Civil Protection said via its social media that the crash site was in an area that was difficult to access.

Initial authorities on the scene “reported a preliminary count of seven people dead,” who haven’t been identified yet, according to the agency.

“A fire was extinguished and risk mitigation was carried out to prevent possible additional damage,” it added.

Authorities said they were awaiting the arrival of forensic investigators to remove the bodies and rule out the presence of additional victims.

Continue Reading

World

12 Pathways to U.S. citizenship available in 2025

Published

18 hours ago

on

December 23, 2024 9:50 am

By

There are twelve main pathways for individuals to apply for U.S. citizenship, each with specific criteria and procedures.

These options include family-based immigration, employment opportunities, and asylum, providing various routes for those seeking U.S. citizenship.

According to the DAAD Scholarship, prospective applicants can pursue different immigration routes, depending on their situation.

From marriage to a U.S. citizen to qualifying for the Diversity Visa Lottery, each pathway leads to permanent residency and, eventually, citizenship.

Below is a breakdown of the twelve most common ways to gain U.S. citizenship.

1. Military Service Pathway

Non-citizens who serve in the U.S. military can apply for naturalization during active duty or after one year of service.

Apply here: Naturalization through Military Service

2. Family-Based Immigration (Immediate Relatives)

Immediate relatives of U.S. citizens—spouses, parents, and unmarried children under 21—do not face annual visa caps. After receiving a Green Card, they can apply for citizenship after 3 to 5 years.

Apply here: Green Card for Immediate Relatives 

3. Marriage to a U.S. Citizen

Marrying a U.S. citizen allows immigrants to apply for a Green Card through a spousal visa. After three years of marriage as a permanent resident, they may apply for naturalization.

Apply here: Spousal Visa Information 

4. Diversity Visa (DV) Lottery

The Diversity Visa Lottery offers a random selection process for applicants from countries with low immigration rates to the U.S. If selected, individuals receive a Green Card and can apply for citizenship after five years.

Apply here: DV Lottery Application 

5. Employment-Based Immigration (EB-1, EB-2, EB-3)

Highly skilled workers or professionals in high-demand fields may obtain a Green Card through employment-based visas, including EB-1 and EB-3 categories. After five years, applicants can apply for U.S. citizenship.

Apply here: Employment-Based Green Card 

6. Refugee or Asylum Seeker Pathway

Individuals fleeing persecution can apply for refugee or asylum status and later adjust their status to permanent resident. After five years, they may apply for citizenship.

7. Family-Based Immigration (Preference Categories)

Siblings and married children of U.S. citizens can apply for Green Cards, though the process may take several years due to long waiting times. Once approved, applicants can apply for citizenship after five years.

Apply here: Family Preference Green Card 

8. Study-to-Citizenship Pathway

International students who graduate from U.S. universities on F-1 visas can transition to work visas like H-1B, secure employer sponsorship, and eventually apply for citizenship after five years.

Apply here: Steps to Naturalization 

9. Special Immigrant Visas and Humanitarian Pathways

Special immigrant visas are available for those who have worked with U.S. forces abroad or victims of trafficking. After receiving a Green Card, they may apply for citizenship.

Apply here: Special Immigrant Visa

10. EB-5 Investor Visa

Through the EB-5 program, individuals who invest $900,000 to $1.8 million in a U.S. business may obtain a Green Card. Citizenship can be pursued after five years.

Apply here: EB-5 Immigrant Investor Program 

11. Adoption Pathway

Children under 18 who are adopted by U.S. citizens automatically gain citizenship upon entering the U.S. as permanent residents.

Apply here: Adoption Process 

12. Special Legal Provisions

Some individuals may qualify for citizenship under special provisions, such as the U visa for victims of crime or the registry for those who have lived in the U.S. since 1972.

Common requirements for U.S. citizenship 

Regardless of the pathway, applicants must be at least 18 years old, have continuous residence for 3 to 5 years as a Green Card holder, and be physically present in the U.S. for 18 to 30 months, depending on their specific situation.

Additionally, applicants must demonstrate good moral character, pass an English and civics test, and take the Oath of Allegiance.

The road to U.S. citizenship in 2025 involves multiple options, each with its own challenges. Understanding the requirements of each pathway is essential for anyone seeking permanent residency or citizenship in the United States.

Continue Reading

Most Read...