Skip to main content

Experts Warn of RambleOn Android Malware Targeting Journalists.

#we_inform_the_uninformed . Read details in the link.


RambleOn Android Malware

Suspected North Korean nation-state actors targeted a journalist in South Korea with a malware-laced Android app as part of a social engineering campaign.


The findings come from South Korea-based non-profit Interlab, which coined the new malware RambleOn.


The malicious functionalities include the “ability to read and leak target’s contact list, SMS, voice call content, location and others from the time of compromise on the target,” Interlab threat researcher Ovi Liber said in a report published this week.


The spyware camouflages as a secure chat app called Fizzle (ch.seme), but in reality, acts as a conduit to deliver a next-stage payload hosted on pCloud and Yandex.https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-7983783048239650&output=html&h=312&slotname=2185767680&adk=2138192652&adf=4257282429&pi=t.ma~as.2185767680&w=375&lmt=1676719550&rafmt=1&armr=2&format=375×312&url=https%3A%2F%2Fthehackernews.com%2F2023%2F02%2Fexperts-warn-of-rambleon-android.html%3Fm%3D1&fwr=1&fwrattr=true&rh=250&rw=300&rpe=1&resp_fmts=3&sfro=1&wgl=1&dt=1676752530140&bpp=13&bdt=4019&idt=1506&shv=r20230215&mjsv=m202302130101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D111b140cf6dc41b8-22bb474916dc0030%3AT%3D1676493208%3ART%3D1676493208%3AS%3DALNI_MZ6ozU7VJxWMh6EefIRXf14niMUaQ&gpic=UID%3D0000093c7c7fe0ce%3AT%3D1675542574%3ART%3D1676557333%3AS%3DALNI_MauUkD8EvkxOO_Jzj1IWEsPI0tMtA&prev_fmts=0x0&nras=1&correlator=5900245136884&frm=20&pv=1&ga_vid=916264310.1676752533&ga_sid=1676752533&ga_hid=134614033&ga_fc=0&u_tz=180&u_his=1&u_h=667&u_w=375&u_ah=667&u_aw=375&u_cd=32&u_sd=2&adx=0&ady=1191&biw=375&bih=559&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C44779794%2C44784436&oid=2&pvsid=1505752184154563&tmod=1784360420&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C375%2C0%2C375%2C667%2C375%2C559&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=31&ifi=2&uci=a!2&btvi=1&fsb=1&xpc=ZRqLlmeh4i&p=https%3A//thehackernews.com&dtd=2555


The chat app is said to have been sent as an Android Package (APK) file over WeChat to the targeted journalist on December 7, 2022, under the pretext of wanting to discuss a sensitive topic.


The primary purpose of RambleOn is to function as a loader for another APK file (com.data.WeCoin) while also requesting for intrusive permissions to collect files, access call logs, intercept SMS messages, record audio, and location data.


RambleOn Android Malware

The secondary payload, for its part, is designed to provide an alternative channel for accessing the infected Android device using Firebase Cloud Messaging (FCM) as a command-and-control (C2) mechanism.


Interlab said it identified overlaps in the FCM functionality between RambleOn and FastFire, a piece of Android spyware that was attributed to Kimsuky by South Korean cybersecurity company S2W last year.


“The victimology of this event fits very closely with the modus operandi of groups such as APT37 and Kimsuky,” Liber said, pointing out the former’s use of pCloud and Yandex storage for payload delivery and command-and-control.



Labels:

Comments

Post a Comment

Popular posts from this blog

Lab Student Drowned, Body Missing in Rokoze Lake in Nyadri Sub-county, Maracha District.

Maracha District.  5-December-2025. 📸: Residents gathered around the lake as they searched the missing body of the student. Photo by #Information_is_Power's news reporter.  This afternoon Friday 5-December-2025, a student from St Joseph Laboratory Training School in Maracha hospital, a one  Araku Denis drowned in Rokoze water body in Nyadri Sub-county and the  body has not been retrieved upto this night as the police and residents searched for it and in vain but they are expected to resume retrieving it tomorrow Saturday 6-December-2025. 📸: Photo of the deceased which we captured on his phone screen this night. Araku and his fellow students had  reportedly gone to pass time at water point after completing exams papers of today. Him and callagues got attracted to swimming at water body where he perished.  By press time, efforts to retrieve his body proved futile as the body remains invisible on water surface.  Rokoze water body...
Post a Comment
Read more

Hon Oguzu Lee Denis Drags to Court, Maracha Constituency MP-Elect Uhuru Nelson and Electoral Commission.

Story by Osuta Yusuf.  Maracha District 6-April-2026. Following the 15-1-2026 general election, the two term MP for Maracha Constituency, Hon Oguzu Lee Denis has dragged to court the Winner for Maracha Constituency MP election, Uhuru Nelson as the first respondent and Election Commission as the second respondent.  📸: Copy of the court document shared in NEWS PLATFORM, one of the WhatsApp groups in WestNile region. In a document dated 1-April-2026 filed at Arua High Court, it's not yet clear which grounds the petitioner, Hon Oguzu Lee Denis has used to challenge the victory of the NRM Party candidate Uhuru Nelson.  It should be noted that, the NRM Party candidate Uhuru Nelson was declared the winner of the 15-1-2026 general election after he garnered 13,696 votes, followed by Independent candidate Obeta Moses Drakua who garnered 9,247 votes, the incumbent MP Hon Oguzu Lee Denis (FDC) fell in the third position after he got 3,290 votes, Eng. Aguta Sam (Independent) got 686...
Post a Comment
Read more

Famous Arua City TikToker Arrested on Allegations of Lesbianism Act.

Arua City. 20-2-2026. A famous TikToker from Arua City, WestNile region, in the names of Torrero Bae was arrested on Wednesday 18-2-2026 and taken to Onduparaka Police Station on Allegations of engaging in Lesbianism acts with another girl. Story excerpts from the Facebook account of Kawawa Michael.  📸: Part of the screenshot  📸: Screenshot from Facebook.  I have spoken to a reliable source from Onduparaka Div police HQS  As concerns the case of these girls  It's true they have confessed to being lesbians and the whole of their dancing group is involved  She comes from a good family and the mother is a teacher by profession I will hide her names  It's alleged that she started her lesbiansim from school that is why she ran away from the mother that is according to her mother who was present at Onduparaka today  Police is trying to apprehend the whole group then make a decision on the file at the moment other...
Post a Comment
Read more