Latest Mobile Phone Hijacking Circulates via SMS: The Morpheus Modus Operandi

A report from the Italian digital rights organisation Osservatorio Nessuno has revealed findings on a new malware named Morpheus. This malware is said to masquerade as a mobile phone update application to steal various types of data. According to the findings, Morpheus is connected to an Italian company named IPS. The company, which has been operating for more than 30 years, is a traditional provider of legal wiretapping technology. IPS states on its official website that it operates in more than 20 countries. Some clients claimed by the company include several Italian police forces. That conclusion comes from the spyware’s infrastructure, particularly one IP address registered under IPS Intelligence Public Security. Citing TechCrunch, Morpheus is described as low-cost spyware. The infection mechanism used is simple, namely making potential victims install the spyware themselves. Researchers say local authorities use assistance from the target’s mobile phone service providers to block mobile data. The telecommunications providers will send an SMS to the target and encourage the victim to install an application claimed to help update apps. Once installed, the malware will access Android’s built-in accessibility features to read data on the victim’s screen and interact with other applications. Researchers say Morpheus is designed to access all types of information on the device. To perfect its crime, the software will create fake updates and display a reboot screen. The WhatsApp application will appear and ask the victim to provide biometric data to verify the phone user’s identity. However, this biometric is a way to gain full access to the WhatsApp account. Similar strategies have been found in government hacks in Ukraine and espionage campaigns in Italy. Researchers from Osservatorio Nessuno, named Davide and Giulio, declined to provide specific details on who the targets of Morpheus are. However, they believe the attacks are related to political activism in Italy.