Android gambling app malware collects user data and rigged odds exploit players
FortiGuard Labs analyzed a malicious Android application called TinstaPorn, disguised as a Macau casino app. It manipulates gambling odds in favor of operators and collects personal data such as phone numbers, location, and device info, which it transmits to servers. Developed with Flutter, the app's compiled code complicates analysis, but a multistage backend infrastructure supports its operations, referencing server configs from GitHub and Gitee, with traffic encrypted but not fully protected. This presents a significant privacy and financial risk to users.
Linha do tempo
-
Android gambling app malware collects user data and rigged odds exploit players
ler a análise desta fonte ocultar
FortiGuard Labs analyzed a malicious Android application called TinstaPorn, disguised as a Macau casino app. It manipulates gambling odds in favor of operators and collects personal data such as phone numbers, location, and device info, which it transmits to servers. Developed with Flutter, the app's compiled code complicates analysis, but a multistage backend infrastructure supports its operations, referencing server configs from GitHub and Gitee, with traffic encrypted but not fully protected. This presents a significant privacy and financial risk to users.