[mothered]

Greetings everyone,

A malware labelled "Roaming Mantis", Is circulating the globe Infecting smartphones via Wi-Fi routers by using the good old DNS hijacking. As you'll read further down, It's a simple yet effective form of malware distribution.

A malware that infects smartphones through Wi-Fi routers - dubbed 'Roaming Mantis' - is rapidly spreading across the world after first emerging only a couple months ago.

The malware uses compromised routers to infect Android phones and tablets and redirect iOS devices to a phishing site.

Through DNS hijacking, the malware uses compromised routers to infect Android smartphones and tablets, redirect iOS devices to a phishing site, and run CoinHive, a cryptomining script, on desktops and computers.

Roaming Mantis has chosen the simplest and most effective form of DNS hijacking, according to Kaspersky, which involves hijacking the settings of compromised routers and forcing them to use their own rogue DNS servers, meaning a user will be redirected to a malicious site if using a device connected to the compromised router.

Source.

[AndrewluckTx]

thanks for the post does it say any recommendations on how to protect your devices ?

[Vultra]

Well fork me. Why does it have to end with a bad ending, not a happy one :/....

[mothered]

thanks for the post does it say any recommendations on how to protect your devices ?

There's no mention In terms of preventative measures, only the steps required once Infected.

Kaspersky included several steps to assist users infected with Roaming Mantis, including the installation of antivirus software on all infected devices, followed by a deep clean after its removal that entails changing passwords and cancelling bank cards, changing the router administrator password and updating the firmware, as well as verifying that their router's DNS server address matches the one issued by the ISP.

Security software with active monitoring, Inclusive of traffic filtering and predefined rules, will significantly help. So too will a firmware update (patch) released by the manufacturer.

[Dexdeniro]

Is there any anti apps u reccomend because i cant get this shit. Just got a brand new galaxy.

[mothered]

Is there any anti apps u reccomend because i cant get this shit. Just got a brand new galaxy.

Does It come with the built-In Knox Active Protection?

If so, It's disabled by default, hence you need to enable It and reboot the device for the change to take effect.