Terrifying Android malware can record audio and video, spy on devices

GhostCtrl hides behind the names of popular apps like 'Pokemon Go'

Terrifying Android malware can record audio and video, spy on devices

GhostCtrl hides behind the names of popular apps like 'Pokemon Go'

GhostCtrl, a form of malware that can secretly film and record user activity, is targeting Android smartphone owners by hiding behind the names of popular apps like WhatsApp and Pokemon Go. There are three versions of GhostCtrl - one restricts a device's functions and collects its data, a second version behaves like ransomware and can freeze a victim's smartphone, and a third carries out a combination of the first two strains. "Based on the techniques each employed, we can only expect it to further evolve," said software security firm Trend Micro earlier this week. "The malware masquerades as a legitimate or popular app that uses the names App, MMS, WhatsApp, and even Pokemon GO.""The data GhostCtrl steals is extensive, compared to other Android info-stealers," the Tokyo, Japan-based company explained. The malware also tricks the victim into believing it's a "legitimate system application." Once installed, GhostCtrl can root a device, control its vibrate function, delete and rename files, download photos, use the text-to-speech feature, send text messages to specific phone numbers, delete text messages, make phone calls, record video and audio, delete browser history, open apps without permission, and spy on a user's call history, contacts, phone numbers, location, battery status, Bluetooth data and more. Here's how to prevent GhostCtrl from infiltrating your smartphone:Keep your Android-based device updated.Restrict user permission to prevent unauthorized access and app installation.Use a firewall or mobile security app to avoid cyberassaults.Back up data in case of ransomware, data loss or device theft.

GhostCtrl, a form of malware that can secretly film and record user activity, is targeting Android smartphone owners by hiding behind the names of popular apps like WhatsApp and Pokemon Go.

There are three versions of GhostCtrl - one restricts a device's functions and collects its data, a second version behaves like ransomware and can freeze a victim's smartphone, and a third carries out a combination of the first two strains.

"Based on the techniques each employed, we can only expect it to further evolve," said software security firm Trend Micro . "The malware masquerades as a legitimate or popular app that uses the names App, MMS, WhatsApp, and even Pokemon GO."

"The data GhostCtrl steals is extensive, compared to other Android info-stealers," the Tokyo, Japan-based company explained. The malware also tricks the victim into believing it's a "legitimate system application."

, GhostCtrl can root a device, control its vibrate function, delete and rename files, download photos, use the text-to-speech feature, send text messages to specific phone numbers, delete text messages, make phone calls, record video and audio, delete browser history, open apps without permission, and spy on a user's call history, contacts, phone numbers, location, battery status, Bluetooth data and more.

Here's how to prevent GhostCtrl from infiltrating your smartphone:

Keep your Android-based device updated.

Restrict user permission to prevent unauthorized access and app installation.

Use a firewall or to avoid cyberassaults.

Back up data in case of ransomware, data loss or device theft.

��vlog