New Android Malware Alert: FireScam Targets RuStore Users!

🌐 Android users, beware! A new malware called FireScam is on the rise, targeting users by posing as a premium Telegram app. Distributed through phishing websites on GitHub mimicking RuStore (Russia’s app market), this malicious software is designed to steal your sensitive data.

RuStore, launched in May 2022 by VK (VKontakte), emerged as an alternative to Google Play and Apple’s App Store due to Western sanctions. Hosting apps compliant with Russian regulations, it has gained significant traction among users in the region.

🔹 Dropper Module: Users are tricked into downloading a file named GetAppsRu.apk, obfuscated to evade detection.

🔹 Payload Installation: The dropper installs the main malware file, Telegram Premium.apk.

🔹 Permissions Abuse: It gains access to your storage, clipboard, SMS, and telephony services, among others.

💻 Displays a fake Telegram login page to steal credentials.