SpaceCobra Group Goes After WhatsApp Backups Using Android Spyware GravityRAT


ESET researchers have identified an updated version of the Android-based GravityRAT spyware being distributed as the messaging apps BingeChat and Chatico. GravityRAT is a remote access tool previously used in targeted attacks against users in India. Windows, Android, and macOS versions are available. The actor behind GravityRAT remains unknown; ESET Research tracks the group known as SpaceCobra. Most likely active since August 2022, the BingeChat campaign is still ongoing. In the newly discovered campaign, GravityRAT can exfiltrate WhatsApp backups and receive commands to delete files. The malicious apps also provide legitimate chat functionality based on the open-source OMEMO Instant Messenger app.

Just as in previously documented SpaceCobra campaigns, the Chatico campaign targeted a user in India. The BingeChat app is distributed through a website that requires registration, likely open only when the attackers expect specific victims to visit, possibly with a particular IP address, geolocation, custom URL, or within a specific timeframe. In any case, the campaign is very likely highly targeted.

“We found a website that should provide the malicious app after tapping the DOWNLOAD APP button; however, it requires visitors to log in. We didn’t have credentials, and registrations were closed. It is most probable that the operators only open registration when they expect a specific victim to visit, possibly with a particular IP address, geolocation, custom URL, or within a specific timeframe,” says ESET researcher Lukáš Štefanko, who investigated the malicious apps. “Although we couldn’t download the BingeChat app via the website, we were able to find a distribution URL on VirusTotal,” he adds. The malicious app has never been made available in the Google Play store.

ESET Research does not know how potential victims were lured to, or otherwise discovered, the malicious website. Considering that downloading the app is conditional on having an account and new account registration was not possible during the investigation, ESET believes that potential victims were specifically targeted.

The group behind the malware remains unknown, even though Facebook researchers attribute GravityRAT to a group based in Pakistan, as previously speculated by Cisco Talos. ESET tracks the group under the name SpaceCobra, and attributes both the BingeChat and Chatico campaigns to this group. As part of the app’s legitimate functionality, it provides options to create an account and log in.

Before the user signs into the app, GravityRAT starts to interact with its C&C server, exfiltrating the device user’s data and waiting for commands to execute. GravityRAT is capable of exfiltrating call logs, contact lists, SMS messages, device locations, basic device information, and files with specific extensions for pictures, photos, and documents. This version of GravityRAT has two small updates compared to previous, publicly known versions of GravityRAT: exfiltrating WhatsApp backups and receiving commands to delete files.

Prarthana Mary

HP | Poly Strengthens Hybrid Ecosystem with AI-Powered Experiences

Previous article

Motorola Mobility and Logicom Forge Strategic Partnership

Next article

You may also like


  1. A compatibilidade do software de rastreamento móvel é muito boa e é compatível com quase todos os dispositivos Android e iOS. Depois de instalar o software de rastreamento no telefone de destino, você pode ver o histórico de chamadas do telefone, mensagens de conversa, fotos, vídeos, rastrear a localização GPS do dispositivo, ligar o microfone do telefone e registrar a localização ao redor.

  2. Online medicine home delivery india pharmacy
    world pharmacy india

  3. reputable indian pharmacies

  4. indian pharmacy paypal best online pharmacy india
    world pharmacy india

  5. cheapest online pharmacy india [url=]Cheapest online pharmacy[/url] reputable indian online pharmacy

  6. buying from online mexican pharmacy: mexican pharmacy – mexico drug stores pharmacies

  7. best rated canadian pharmacy

  8. cost of propecia without a prescription: generic propecia – generic propecia tablets

  9. п»їcytotec pills online

  10. lisinopril 10mg tablets

  11. order cytotec online [url=]buy cytotec over the counter[/url] buy cytotec over the counter

  12. tamoxifen menopause [url=]tamoxifen bone density[/url] tamoxifen blood clots

  13. buy cytotec over the counter
    buy cheap propecia no prescription [url=]cost cheap propecia[/url] buying cheap propecia without a prescription

  14. tamoxifen and uterine thickening: tamoxifen moa – tamoxifen cancer

  15. cipro online no prescription in the usa

  16. order cytotec online [url=]order cytotec online[/url] buy cytotec online

  17. nolvadex steroids: tamoxifen and ovarian cancer – lexapro and tamoxifen

  18. cipro ciprofloxacin

  19. cipro [url=]cipro ciprofloxacin[/url] ciprofloxacin mail online

  20. nolvadex for sale
    cipro [url=]antibiotics cipro[/url] cipro online no prescription in the usa

  21. buy cipro online: cipro ciprofloxacin – cipro online no prescription in the usa

  22. lisinopril medicine

  23. what is tamoxifen used for [url=]tamoxifen hot flashes[/url] tamoxifen lawsuit

  24. cytotec pills online: buy cytotec online fast delivery – buy cytotec pills

  25. п»їcipro generic

  26. how does tamoxifen work [url=]tamoxifen warning[/url] low dose tamoxifen

  27. buy cytotec online fast delivery

  28. buying cheap propecia without prescription
    cytotec online [url=]buy cytotec over the counter[/url] buy cytotec pills

  29. tamoxifen hip pain [url=]nolvadex vs clomid[/url] tamoxifen medication

  30. lisinopril 5 mg tablet price: lisinopril 80mg tablet – average cost of lisinopril

  31. tamoxifen estrogen

  32. get cheap propecia without a prescription [url=]get propecia without a prescription[/url] order generic propecia without rx

  33. prinivil 5mg tablet: lisinopril cost us – lisinopril 12.5

  34. buy cytotec in usa

  35. lisinopril online canadian pharmacy [url=]16 lisinopril[/url] lisinopril pharmacy online

  36. buy cytotec online fast delivery

  37. tamoxifen 20 mg tablet
    generic tamoxifen [url=]tamoxifen benefits[/url] tamoxifen rash pictures

  38. ciprofloxacin 500mg buy online

  39. cipro: antibiotics cipro – cipro for sale

  40. п»їcipro generic [url=]cipro ciprofloxacin[/url] ciprofloxacin

  41. cipro ciprofloxacin

  42. lisinopril 500 mg: 3 lisinopril – cost of lisinopril in mexico

  43. generic propecia without rx [url=]buy propecia for sale[/url] get generic propecia without a prescription

  44. buy cipro online

  45. buy cytotec online

  46. buy cytotec pills: buy cytotec in usa – Cytotec 200mcg price

  47. buy cytotec pills [url=]cytotec buy online usa[/url] Cytotec 200mcg price

  48. ciprofloxacin 500mg buy online
    price lisinopril 20 mg [url=]buy lisinopril 20 mg[/url] zestril

  49. tamoxifen citrate pct

  50. nolvadex price [url=]does tamoxifen cause bone loss[/url] benefits of tamoxifen

  51. lipinpril: lisinopril tabs – generic lisinopril 40 mg

  52. Viagra Tablet price: Buy Viagra online cheap – viagra without prescription

  53. Generic Cialis price

  54. Buy Cenforce 100mg Online

  55. Cheap Levitra online [url=]Levitra generic price[/url] Buy Vardenafil 20mg

  56. Cheap Sildenafil 100mg [url=]Cheapest place to buy Viagra[/url] sildenafil online

  57. cenforce for sale: cheapest cenforce – order cenforce


  59. Levitra 10 mg best price: Buy generic Levitra online – Cheap Levitra online

  60. Cialis 20mg price in USA [url=]buy cialis online[/url] cheapest cialis

  61. Cialis 20mg price: Generic Tadalafil 20mg price – Buy Tadalafil 20mg

  62. Levitra generic best price

  63. Cenforce 150 mg online

  64. Cheap Levitra online [url=]Vardenafil online prescription[/url] Buy Levitra 20mg online

  65. buy Levitra over the counter

  66. kamagra: kamagra oral jelly – Kamagra 100mg

  67. buy cialis pill

  68. Levitra 20 mg for sale [url=]buy Levitra over the counter[/url] buy Levitra over the counter

  69. Buy Cenforce 100mg Online: cheapest cenforce – cheapest cenforce

  70. kamagra: kamagra oral jelly – Kamagra 100mg price

  71. Purchase Cenforce Online

  72. Levitra 20 mg for sale [url=]buy Levitra over the counter[/url] Buy Vardenafil 20mg online

  73. Levitra tablet price: Buy Vardenafil 20mg – Levitra online USA fast

  74. canada prescription drugs online

  75. canadian pharmacy no prescription: cheapest pharmacy – cheapest pharmacy for prescriptions

  76. medicine in mexico pharmacies: mexican pharmaceuticals online – medication from mexico pharmacy

  77. reputable mexican pharmacies online

  78. canada discount pharmacy [url=]canadian pharmacies that deliver to the us[/url] reliable canadian pharmacy

  79. medicine with no prescription [url=]buy prescription drugs without a prescription[/url] pills no prescription

  80. legit canadian pharmacy: canadadrugpharmacy com – recommended canadian pharmacies

  81. top online pharmacy india: india pharmacy mail order – Online medicine order

  82. no prescription online pharmacies

  83. mexican pharmacy [url=]mexican rx online[/url] mexican online pharmacies prescription drugs

  84. indian pharmacy paypal: india pharmacy – Online medicine home delivery

  85. top online pharmacy india

  86. pharmacy com canada [url=]canadian drugs pharmacy[/url] global pharmacy canada

  87. meds online no prescription: canada prescription online – non prescription pharmacy

  88. canadian pharmacy discount code: online pharmacy – online pharmacy no prescription

  89. Online medicine order: pharmacy website india – online pharmacy india

  90. best online pharmacy india [url=]best online pharmacy india[/url] reputable indian online pharmacy

  91. online pharmacy india: indianpharmacy com – india pharmacy mail order

  92. best india pharmacy

  93. п»їonline pharmacy no prescription needed

  94. canadian pharmacy no rx needed [url=]canadian pharmacy no scripts[/url] canada pharmacy online legit

  95. legitimate online pharmacies india: reputable indian pharmacies – india online pharmacy

  96. canadian pharmacy no prescription needed

  97. gabapentin 300 [url=]buy neurontin[/url] neurontin prescription medication

  98. neurontin price india: neurontin 202 – neurontin 800

  99. neurontin 100mg tablet: neurontin brand name 800mg – buy neurontin 300 mg

  100. buy zithromax no prescription

  101. doxy 200 [url=]buy doxycycline online[/url] odering doxycycline

  102. neurontin buy online: neurontin 202 – neurontin 100 mg cost

  103. prednisone for sale in canada: prednisone without prescription medication – prednisone 20mg capsule

  104. prednisone 10mg tablet price: prednisone canada pharmacy – 80 mg prednisone daily

  105. prednisone 20 mg pill: buy prednisone nz – prednisone

  106. order doxycycline 100mg without prescription: buy doxycycline without prescription – buy doxycycline online without prescription

  107. amoxicillin online pharmacy: amoxicillin 500mg buy online canada – amoxicillin cephalexin

  108. doxycycline hyclate 100 mg cap [url=]100mg doxycycline[/url] doxycycline 100mg

  109. how to get prednisone without a prescription

  110. generic doxycycline: doxycycline tetracycline – order doxycycline

  111. cheap amoxicillin 500mg: generic amoxicillin – amoxicillin without a prescription

  112. neurontin cream [url=]buy neurontin 100 mg canada[/url] order neurontin over the counter

  113. doxycycline tetracycline: buy doxycycline online – odering doxycycline

  114. purchase amoxicillin online [url=]amoxicillin over the counter in canada[/url] amoxicillin 500 capsule

  115. how much is amoxicillin: amoxicillin 500 mg tablet – amoxicillin 500mg capsule

  116. prednisone 10 mg canada: where to buy prednisone uk – prednisone 20mg for sale

  117. rexall pharmacy amoxicillin 500mg

  118. doxycycline pills [url=]doxycycline hyc 100mg[/url] doxycycline medication

  119. amoxicillin generic: amoxicillin 500 mg tablet – buy amoxicillin 500mg canada

  120. zithromax without prescription [url=]generic zithromax india[/url] generic zithromax online paypal

  121. neurontin 500 mg tablet: neurontin tablets – neurontin tablets uk

  122. doxycycline 200 mg

  123. buy cheap generic zithromax: how to get zithromax – where can i buy zithromax uk

  124. zithromax prescription in canada [url=]average cost of generic zithromax[/url] buy zithromax online with mastercard

  125. amoxicillin azithromycin

  126. antibiotic amoxicillin: how much is amoxicillin prescription – amoxicillin no prescipion

  127. prednisone 30 mg daily: canada buy prednisone online – order prednisone from canada

  128. how to buy zithromax online [url=]zithromax purchase online[/url] zithromax online pharmacy canada

  129. can i buy prednisone from canada without a script

  130. zithromax z-pak price without insurance: zithromax 500 mg for sale – buy cheap zithromax online

  131. buy zithromax 1000 mg online: where can you buy zithromax – where can i buy zithromax capsules

  132. buy amoxicillin 500mg [url=]amoxicillin 500 mg for sale[/url] buy amoxicillin

  133. neurontin generic cost

  134. prednisone without rx: prednisone 40 mg – prednisone buy cheap

  135. cost of prednisone 5mg tablets: prednisone buy – prednisone daily use

  136. neurontin 800 pill [url=]neurontin 214[/url] neurontin for sale online

  137. cost of brand name neurontin

  138. doxycycline 100mg: doxycycline without a prescription – doxycycline generic

  139. cheap prednisone 20 mg [url=]prednisone prices[/url] prednisone pill

  140. medicine amoxicillin 500: buy amoxicillin 500mg – amoxicillin azithromycin

  141. buy doxycycline without prescription: buy doxycycline 100mg – how to order doxycycline

  142. neurontin drug [url=]buy gabapentin[/url] 300 mg neurontin

  143. prednisone coupon

  144. generic for doxycycline: doxylin – doxycycline hydrochloride 100mg

  145. can you buy zithromax online: zithromax for sale online – generic zithromax india

  146. amoxicillin 500 mg without a prescription [url=]amoxicillin 875 125 mg tab[/url] buy amoxicillin 500mg usa

  147. azithromycin amoxicillin

  148. doxycycline hyc 100mg: order doxycycline – doxycycline 500mg

  149. buy doxycycline online: buy doxycycline without prescription – generic for doxycycline

  150. can we buy amoxcillin 500mg on ebay without prescription [url=]buying amoxicillin in mexico[/url] amoxicillin 500mg buy online canada

  151. prednisone 50 mg tablet canada

  152. zithromax 250 mg tablet price: zithromax 500mg – can you buy zithromax over the counter in australia

  153. cheap zithromax pills [url=]zithromax 250 price[/url] where can i get zithromax over the counter

  154. rexall pharmacy amoxicillin 500mg: where can i get amoxicillin 500 mg – purchase amoxicillin online

  155. doxycycline tetracycline

  156. mexican pharmacy: reputable mexican pharmacies online – mexican drugstore online

  157. mexican online pharmacies prescription drugs

  158. mexican online pharmacies prescription drugs

  159. mexican pharmaceuticals online [url=]п»їbest mexican online pharmacies[/url] mexican pharmacy

  160. mexican drugstore online: mexican mail order pharmacies – mexico drug stores pharmacies

  161. buying prescription drugs in mexico

  162. mexican border pharmacies shipping to usa: mexican rx online – reputable mexican pharmacies online

  163. medicine in mexico pharmacies [url=]mexican pharmaceuticals online[/url] mexico drug stores pharmacies

  164. п»їbest mexican online pharmacies: buying from online mexican pharmacy – medicine in mexico pharmacies

  165. mexico pharmacies prescription drugs: best online pharmacies in mexico – medication from mexico pharmacy

  166. mexican mail order pharmacies [url=]reputable mexican pharmacies online[/url] medication from mexico pharmacy

  167. mexico pharmacy: buying prescription drugs in mexico – mexican rx online

  168. mexican pharmaceuticals online

  169. mexico pharmacy [url=]mexican drugstore online[/url] mexican rx online

  170. mexican border pharmacies shipping to usa: mexico drug stores pharmacies – buying from online mexican pharmacy

  171. mexican pharmaceuticals online [url=]mexican pharmaceuticals online[/url] mexican pharmacy

  172. medicine in mexico pharmacies: mexico pharmacy – best online pharmacies in mexico

  173. п»їbest mexican online pharmacies

  174. purple pharmacy mexico price list [url=]mexican border pharmacies shipping to usa[/url] mexican pharmacy

  175. mexican pharmaceuticals online

  176. reputable mexican pharmacies online: mexican drugstore online – medication from mexico pharmacy

  177. mexican online pharmacies prescription drugs: buying prescription drugs in mexico online – best online pharmacies in mexico

  178. buying from online mexican pharmacy

  179. mexico drug stores pharmacies: mexican online pharmacies prescription drugs – mexican online pharmacies prescription drugs

  180. mexico pharmacies prescription drugs: best mexican online pharmacies – purple pharmacy mexico price list

  181. best online pharmacies in mexico [url=]best online pharmacies in mexico[/url] mexican rx online

  182. best mexican online pharmacies: mexican pharmacy – buying from online mexican pharmacy

  183. mexican mail order pharmacies

  184. reputable mexican pharmacies online

  185. pharmacies in mexico that ship to usa [url=]mexican pharmaceuticals online[/url] mexico pharmacies prescription drugs

  186. brand name neurontin

  187. buying cheap propecia without rx: buy cheap propecia pills – get propecia without dr prescription

  188. buy generic clomid no prescription [url=]where to get clomid now[/url] how to get clomid price

  189. clomid pill: can you get cheap clomid price – where can i get cheap clomid no prescription

  190. buy cytotec over the counter: cytotec buy online usa – п»їcytotec pills online

  191. lisinopril 2 mg [url=]3 lisinopril[/url] lisinopril otc

  192. lisinopril pill 40 mg

  193. buy cytotec over the counter [url=]cytotec online[/url] buy misoprostol over the counter

  194. buy cytotec in usa: buy cytotec pills online cheap – buy cytotec online

  195. where to buy clomid without insurance

  196. cytotec pills buy online: buy cytotec over the counter – cytotec abortion pill

  197. buy misoprostol over the counter [url=]buy cytotec over the counter[/url] cytotec online

  198. neurontin 100 mg capsule

  199. neurontin capsules 600mg: medication neurontin – neurontin 100 mg cap

  200. cost of generic propecia without rx [url=]buying propecia tablets[/url] propecia online

  201. lisinopril tablets

  202. neurontin 800 mg tablet: neurontin 100 – how much is neurontin

  203. gabapentin 600 mg

  204. buy cytotec in usa: Cytotec 200mcg price – buy cytotec pills

  205. buy neurontin uk [url=]buy neurontin 100 mg canada[/url] neurontin price in india

  206. propecia without prescription

  207. zestoretic online [url=]lisinopril 2 mg[/url] 50mg lisinopril

  208. buy generic neurontin: neurontin 400mg – neurontin 100 mg cap

  209. buy generic propecia prices

  210. Abortion pills online [url=]buy cytotec online[/url] order cytotec online

  211. neurontin: neurontin 2400 mg – neurontin 300 mg

  212. lisinopril diuretic [url=]how to order lisinopril online[/url] lisinopril tab 5 mg price

  213. neurontin capsules 600mg: neurontin 202 – neurontin 2400 mg

  214. neurontin gabapentin: neurontin 330 mg – generic neurontin 600 mg

  215. reputable indian online pharmacy [url=]world pharmacy india[/url] buy medicines online in india

  216. canadian pharmacies not requiring prescription

  217. top 10 pharmacies in india
    foreign pharmacy no prescription [url=]cheapest pharmacy[/url] prescription drugs from canada

  218. canadian pharmacy coupon code

  219. online prescription canada

  220. online pharmacies without prescription
    indian pharmacy online [url=]п»їlegitimate online pharmacies india[/url] best online pharmacy india

  221. canadian pharmacy world coupon: 36 & 6 health – pharmacy coupons

  222. ordering prescription drugs from canada [url=]buy prescription drugs online without[/url] no prescription canadian pharmacy

  223. canadian family pharmacy
    cheapest pharmacy to get prescriptions filled [url=]36 & 6 health[/url] canadian pharmacy no prescription

  224. Online medicine order

  225. top 10 pharmacies in india
    pharmacy com canada [url=][/url] precription drugs from canada

  226. canadian pharmacy prices

  227. canada pharmacy coupon
    can i buy prescription drugs in canada [url=]cheapest & fast pharmacy[/url] online pharmacy reviews no prescription

  228. best canadian pharmacy

  229. buy prescription drugs online without [url=]cheapest & fast pharmacy[/url] purchasing prescription drugs online

  230. pharmacy website india: india online pharmacy – reputable indian online pharmacy

  231. best online pharmacies in mexico

  232. canadian pharmacy meds review
    india pharmacy [url=]buy prescription drugs from india[/url] buy prescription drugs from india

  233. medicine in mexico pharmacies

  234. best online pharmacies in mexico
    п»їbest mexican online pharmacies [url=]medication from mexico pharmacy[/url] mexican drugstore online

  235. canadian neighbor pharmacy

  236. buy medication online no prescription
    canadian pharmacy world coupon code [url=]36and6health[/url] cheapest pharmacy to fill prescriptions with insurance

  237. prescription from canada

  238. mexican drugstore online

  239. pharmacy rx world canada [url=][/url] trusted canadian pharmacy

  240. top online pharmacy india: india online pharmacy – pharmacy website india

  241. mexico drug stores pharmacies
    п»їbest mexican online pharmacies [url=]buying from online mexican pharmacy[/url] mexican online pharmacies prescription drugs

  242. farmacia online 24 horas: farmacia online madrid – farmacia online madrid

  243. pharmacie en ligne france fiable [url=]pharmacie en ligne avec ordonnance[/url] vente de mГ©dicament en ligne

  244. pharmacie en ligne: pharmacie en ligne france pas cher – п»їpharmacie en ligne france

Leave a reply

Your email address will not be published. Required fields are marked *

More in News