Deep Analysis of SecretCalls, A formidable app for notorious Korean financial fraudsters (Part 2)

Author: S2W TALON

Last modified: Apr 30, 2024Photo by Kasia Derenda on UnsplashYou can also read more about the Voice Phishing Group in the announcement we made at Black hat asia 24 — https://www.blackhat.com/asia-24/briefings/schedule/index.html#voice-phishing-syndicates-unmasked-an-in-depth-investigation-and-exposure-37941

Executive Summary

• SecretCalls is installed via SecretCalls Loader and performs functions to steal data from infected devices and manipulate call flow.
• Unlike SecretCalls Loader, SecretCalls utilizes the Realm Database to store infection status information and data for further malicious behavior.
• Commands are …

analysis app article blog financial fraudsters link malware analysis medium s2w topic