{"id":14705,"date":"2017-10-22T08:00:18","date_gmt":"2017-10-22T13:00:18","guid":{"rendered":"https:\/\/www.psafe.com\/en\/blog\/?p=14705"},"modified":"2018-06-12T17:21:03","modified_gmt":"2018-06-12T21:21:03","slug":"chrysaor-the-dark-horse-of-android-malware","status":"publish","type":"post","link":"https:\/\/www.psafe.com\/en\/blog\/chrysaor-the-dark-horse-of-android-malware\/","title":{"rendered":"Chrysaor: The Dark Horse of Android Malware"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">A malware system discovered earlier this year, called Chrysaor, was found to have been infecting several devices using Android operating systems for quite some time. Though steps have been taken to protect from further breaches by the program, the advanced nature of Chrysaor provides discomfiting implications about the possible severity of spyware in the future. If you think you may have malware on your device, click here to run a full virus scan:<\/span><\/p>\n<p><center><a href=\"https:\/\/app.appsflyer.com\/com.psafe.msuite?pid=MKT_BLOG_US&amp;c=chrysaor_android_malware\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-9829 size-full\" src=\"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2017\/04\/run-security-scan-1.jpg\" alt=\"run-security-scan\" width=\"353\" height=\"79\" srcset=\"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2017\/04\/run-security-scan-1.jpg 353w, https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2017\/04\/run-security-scan-1-300x67.jpg 300w\" sizes=\"auto, (max-width: 353px) 100vw, 353px\" \/><\/a><center><\/center><\/center><a href=\"https:\/\/www.psafe.com\/en\/blog\/chrysaor-pegasus-spyware\/\"><span style=\"font-weight: 400;\"><br \/>\nChrysaor is believed to be related<\/span><\/a><span style=\"font-weight: 400;\"> to the <\/span><a href=\"https:\/\/info.lookout.com\/rs\/051-ESQ-475\/images\/lookout-pegasus-technical-analysis.pdf\"><span style=\"font-weight: 400;\">Pegasus malware tool<\/span><\/a><span style=\"font-weight: 400;\"> that was found infecting Apple\u2019s iOS. Like its cousin targeting Android systems, Pegasus is incredibly sophisticated, dangerous, and hard to detect. Like other spyware, Pegasus works by infiltrating a device through innocuous means, such as fake links sent through SMS or piggybacking off of apps, which then allow it to infect the device. <\/span><\/p>\n<p><span style=\"font-weight: 400;\">Unlike other similar malware programs, however, this one was extremely easy to overlook and had systems in place to remove all traces of its existence. This is believed to be an intentional design function that allows a Pegasus-infected device to essentially become a <\/span><a href=\"https:\/\/www.reuters.com\/article\/us-mexico-spyware\/activists-and-journalists-in-mexico-complain-of-government-spying-idUSKBN19A30Y\"><span style=\"font-weight: 400;\">mobile surveillance tool<\/span><\/a><span style=\"font-weight: 400;\">. Evidence suggests that these spyware programs have spread around the world.<\/span><\/p>\n<p><b>Read More: <\/b><a href=\"https:\/\/www.psafe.com\/en\/blog\/3-spyware-red-flags-consider-clicking\/\"><b>3 Spyware Red Flags to Consider Before Clicking<\/b><\/a><\/p>\n<p><span style=\"font-weight: 400;\">Both Chrysaor and Pegasus are thought to have been developed by the Israeli cyber arms firm, <\/span><a href=\"https:\/\/www.forbes.com\/sites\/thomasbrewster\/2016\/08\/25\/everything-we-know-about-nso-group-the-professional-spies-who-hacked-iphones-with-a-single-text\/#6d1f69953997\"><span style=\"font-weight: 400;\">NSO Group Technologies<\/span><\/a><span style=\"font-weight: 400;\">. The founders of the company are believed to be veterans of one of Israel\u2019s most highly esteemed intelligence units, and potentially have considerable experience in cyber warfare.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The good news is that Google only found a few dozen instances of devices infected with the Chrysaor malware. The very bad news is that, by its very nature, this type of program tries its best to remain hidden and untraceable, and that past infection may be hard to find on an initial sweep. The even worse news is that the implications from the evolution of Chrysaor from Pegasus and its theorized source may mean that even greater threats to cybersecurity for mobile devices may show up in the future.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">With all the threats that exist and may appear down the road, it is important that you secure your devices against the event of a breach. Become familiar with the warning signs of a spyware infection and be prepared to take the appropriate steps to remove any malware.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A sophisticated spyware program with signs of being developed by professional cyber warfare specialists may be lurking within your Android without you knowing.<\/p>\n","protected":false},"author":83,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_crdt_document":"","footnotes":""},"categories":[5],"tags":[30,259,53,182,9,349,161],"class_list":["post-14705","post","type-post","status-publish","format-standard","hentry","category-security","tag-android","tag-hackers","tag-internet","tag-malware","tag-mobile","tag-phone","tag-virus"],"_links":{"self":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts\/14705","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/users\/83"}],"replies":[{"embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/comments?post=14705"}],"version-history":[{"count":2,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts\/14705\/revisions"}],"predecessor-version":[{"id":18944,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts\/14705\/revisions\/18944"}],"wp:attachment":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/media?parent=14705"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/categories?post=14705"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/tags?post=14705"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}