#WHATSAPP SNIFFER LOCAL NETWORK ANDROID#

If the apps using said libraries are WhatsApp or WhatsApp Business, libmtd.so proceeds to launch a third backdoor which downloads and installs additional plugins from a remote server onto the compromised devices. The tampering concerns two files, “/system/lib/libcutils.so” and “/system/lib/libmtd.so”, that are modified specifically so that when the libcutils.so system library is used by any app, it triggers the execution of a trojan incorporated in libmtd.so.

#WHATSAPP SNIFFER LOCAL NETWORK ANDROID#

“Moreover, instead of having one of the latest OS versions installed on them with the corresponding information displayed in the device details (for example, Android 10), they had the long outdated 4.4.2 version.” It stated: “These incidents are united by the fact that the attacked devices were copycats of famous brand-name models.” The cybersecurity firm published a report earlier this week. It was discovered in the system partition of at least four different smartphones: radmi note 8, P48pro, Note30u, and Mate40. Doctor Web first came across the malware in July 2022.

Whatsapp sniffer local network