SMSZombie: A New Twist on C&C
Summary: TrustGo Labs discovered an Android malware called SMSZombie that infected roughly 500,000 users in China after distribution through the GFan mobile application marketplace. The malware sends its command and control traffic entirely over SMS rather than HTTP or other TCP-based packets, sending messages to the number 13093632006 that include device details such as model GT-I9000 and OS 2.1-update1.
What's compelling: IDS analysts cannot detect SMS messages being sent, so the command channel here sits outside the network monitoring most defenders rely on, and Cisco Talos is asking mobile providers to watch for the number and related activity instead.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026