SmokeLoader Trojan Deploys Location-Tracking Malware

'Whiffy Recon' Uses WiFi Access Points, Google API for Geolocation
A backdoor Trojan known as SmokeLoader is deploying a customized WiFi scanning executable to triangulate the location of infected Windows devices. The malware, dubbed "Whiffy Recon," uses nearby WiFi access points as a data point for Google's geolocation API.

access access points api backdoor data devices geolocation google location malware point points recon scanning smokeloader tracking trojan whiffy whiffy recon wifi windows