Menu

  • Alerts
  • Incidents
  • News
  • Cyber Briefing
  • Cyber Decoded
  • Cyber Hygiene
  • Cyber Review
  • Cyber Tips
  • Definitions
  • Malware
  • Tutorials

Useful Tools

  • Password Generator
No Result
View All Result
Wednesday, December 6, 2023
CyberMaterial
  • Education
    • Cyber Decoded
    • Definitions
  • Information
    • Alerts
    • Incidents
    • News
    • Cyber Briefing
  • Insights
    • Cyber Hygiene
    • Cyber Review
    • Tips
    • Tutorials
  • Support
    • Contact Us
Get Help
CyberMaterial
  • Education
    • Cyber Decoded
    • Definitions
  • Information
    • Alerts
    • Incidents
    • News
    • Cyber Briefing
  • Insights
    • Cyber Hygiene
    • Cyber Review
    • Tips
    • Tutorials
  • Support
    • Contact Us
Get Help
No Result
View All Result
CyberMaterial
No Result
View All Result
Home Malware

Triada (Backdoor Trojan) – Malware

Reading Time: 2 mins read
in Malware, Types of Malware
Name Triada
Type of Malware Backdoor Trojan
Date of Initial Activity 2016
Motivation Collects the device ID, MAC address, subscriber ID, and other information (including the name of the app package that deploys it) and sends it to a remote server
Attack Vectors A modified version of WhatsApp called FMWhatsapp (and possibly other apps)
Targeted System Android

Overview

Triada which was first spotted in 2016, is a modular backdoor for Android which grants admin privileges to download another malware. Its latest version is distributed via adware development kits in WhatsApp for Android.

Targets

Android users.

Tools/ Techniques Used

Once the app with Triada hidden in it is launched, the Trojan gathers various device information to set up a communication channel and drops additional payloads via a remote server. Once the modified WhatsApp app (FMWhatsapp) is launched, Triada collects device information and sends it to a remote server. Then the remote server sends a link that Triada uses to download and launch other files. FMWhatsapp is used to download malicious files/other malware.

For example, malware that downloads and launches other malicious modules, displays advertisements (including invisible ads running in the background), signs the victim up for various paid subscriptions, steals login credentials and other data, etc. One of the permissions the FMWhatsapp app asks is to access SMS messages.

Thus, not only FMWhatsapp but also Triada (and other modules launched by it) can access those messages. Threat actors can use this to sign victims up for premium subscriptions (and other malicious purposes).

References

  1. Triada
  2. Triada Trojan Conceals Itself in WhatsApp Mod
  3. Triada Trojan in WhatsApp mod
  4. How to remove Triada Trojan from an Android device
Tags: AndroidBackdoor TrojanCyberattackCybersecurityFMWhatsappMAC addressMalwaremalware nameTriadaVulnerabilitiesWhatsapp
ADVERTISEMENT

Related Posts

WALA Exposes 25GB Pet Owners’ Data

WALA Exposes 25GB Pet Owners’ Data

December 6, 2023
Data Breach in Pan-American insurance

Data Breach in Pan-American insurance

December 6, 2023
Andariel Cyber Theft in South Korea

Andariel Cyber Theft in South Korea

December 6, 2023
HTC Global Services cyberattack confirmed

HTC Global Services cyberattack confirmed

December 6, 2023
SPARRSO Hit by Team Network Nine

SPARRSO Hit by Team Network Nine

December 6, 2023
Ofcom Guides Porn Age Checks

Ofcom Guides Porn Age Checks

December 6, 2023

Latest Alerts

Google Play SpyLoan Scam Unveiled

Qualcomm Security Exploits Unveiled

AI Disinfo Targets Ukraine, U.S., Germany

NFT Collections at Risk for Library Flaw

Deceptive iPhone Lockdown Mode Bypass

GitHub Go Modules Vulnerable to Repojacking

Subscribe to our newsletter

    Latest Incidents

    WALA Exposes 25GB Pet Owners’ Data

    Data Breach in Pan-American insurance

    Andariel Cyber Theft in South Korea

    HTC Global Services cyberattack confirmed

    SPARRSO Hit by Team Network Nine

    OPM Initiates Cyber Rotation for Government

    • About Us
    • Contact Us
    • Legal and Privacy Policy
    • Site Map

    © 2023 | CyberMaterial | All rights reserved

    No Result
    View All Result
    • Alerts
    • Incidents
    • News
    • Cyber Briefing
    • Cyber Decoded
    • Cyber Hygiene
    • Cyber Review
    • Definitions
    • Malware
    • Cyber Tips
    • Tutorials

    Copyright © 2023 CyberMaterial

    Welcome Back!

    Login to your account below

    Forgotten Password?

    Retrieve your password

    Please enter your username or email address to reset your password.

    Log In

    Add New Playlist