Members of the cybersecurity and IT community have successfully obtained a password key for victims of the malicious CovidLock Android app, which supposedly helps track cases of the coronavirus, but actually locks users’ phones and demands a ransom in order to restore access.
The unlock token has been verified as 4865083501.
The recently discovered ransomware performs a screen-lock attack by forcing a change in the password required to unlock a phone, according to DNS threat intelligence company DomainTools in a blog post authored last week by Tarik Saleh, senior security engineer and malware researcher. For Android Nougat devices and later versions, the attack only works if the user never bothers to set a password in the first place.
A Reddit user, luca020400, responding to SC Media’s previous coverage of the app opened a thread revealing that they downloaded the APK was able to decompile it, without even installing it, in order to find the password needed to unlock the affected phones. The user also offered a proof via ..
Support the originator by clicking the read the rest link below.
