“Loozon” and “FinFisher” are the latest known versions of this type of malware, according to the IC3, which investigates Internet-related criminal complaints. The organization is a partnership between the Federal Bureau of Investigation and the Nation White Collar Crime Center.
The malware lures victims in different ways. One advertises itself as a “work at home” opportunity that promises a lucrative payday just for sending out email; an attached link then leads to a website that spreads Loozon to its target, IC3 says in a release.
“The malicious application steals contact details from the user’s address book and the infected device’s phone number.”
FinFisher is spyware that can take over parts of a mobile device; when installed, phones can be “remotely controlled and monitored no matter where the target is located,” IC3 says.