Credit: Rita El Khoury / Android Authority
TL;DR
- North Korean hackers have apparently used Google’s Find Hub to remotely track and wipe victims’ devices.
- A cybersecurity firm said the hackers initially compromised devices by sending malicious files via KakaoTalk.
- It’s recommended that you enable two-factor authentication on your Google account and regularly change your password.
It’s not uncommon for hackers to turn your favorite apps and services against you, and it turns out cybercriminals are abusing Google Find Hub to remotely track and wipe victims’ Android phones and tablets.
Security firm Genians (h/t: Bleeping Computer) reports that North Korean state-backed hackers were compromising victims’ Android devices by using malicious files sent via the KakaoTalk chat app. The malicious scripts would then lie dormant on a user’s device, while also installing additional scripts to monitor and control the system. This way, the cybercriminals are able to harvest credentials for a variety of accounts and services.