Beware! Fake Telegram apps hacking devices with malicious malware that stays hidden from antivirus

Digitization is increasing day-by-day and so as cyber attacks, scams and malware attacks. Though users take many security measures to stay safe from such attacks, hackers find different ways to hack into the device of users.

Now, Cyber-security researchers has issued a important warning for Telegram users that devices and PCs are being hacked by a Windows-based malware, which was being delivered by fake Telegram Messenger app installers. The malware can stay hidden from installed anti-virus systems, steal your data and downloads other malicious files into the system.

In this way, many users might be unaware that their device is already being infected.

According to a report by Minerva Labs, fake Telegram Messenger apps are hacking PCs with Windows-based ‘Purple Fox’ malware. Cyber-security researchers have warned that this malware puts your information at risk.

Researchers have warned that Purple Fox is a highly sophisticated malware that launches multiple attacks and has a low detection rate.

The malware can evade the search of the anti-virus systems. It can hack your device and steal your important data. The fake installers for Telegram messaging application deliver the malware into the system.

Researcher Natalie Zargarov said that the researcher have found a large number of malicious installers delivering the ‘Purple Fox’ rootkit version using the same attack chain. The malware seems to have come via email, and others were were said to be downloaded from phishing websites.

The researcher has also explained why this malware can evade anti-virus detection. The researcher informed that every stage is separated to a several small files. In this way, the malware starts to infect the system step by step without being detected by anti-virus.

“The beauty of this attack is that every stage is separated to a different file which is useless without the entire file set. This helps the attacker protect his files from AV (anti-virus) detection,” explained the researcher.

During the investigation, the researchers found that the malware has a very low detection rates by (antivirus) engines as it separates the attack into several small files and the final stage leads to Purple Fox rootkit infection.

What is Purple Fox rootkit ?

The ‘Purple Fox’ malware was first found in 2018. It comes with rootkit capabilities that gives it the ability to stay hidden in the system from the anti-virus detection, reported thehackernews.com. The rootkit abilities of Purple Fox’ allows the malware to stay undetected and deliver other malicious payloads to affected systems, said researchers.

Researchers of Trend Micro has also discovered a .NET implant being called FoxSocket that was being delivered in conjunction with Purple Fox in October 2021.

How to Stay Safe Against Purple Fox Malware

Users should stay alert of these types of malware attacks. Most of these malware were delivered via mobile virus scams, SMS phishing and voice mail scams. So, watch out for these types of sttacks. Users should also never click on suspicious links and sites as they too contain malicious files.

Users should avoid SMS or calls or advertisements that try to entice users to download a malicious file by promising huge rewards.