Dragon Messenger

Dragon Messenger is a piece of Android malware that was developed by North Korean targets, which are known for launching attack campaigns against North Korean defectors and refugees. The Dragon Messenger application, in particular, was spread via a fake fundraising application that promises to help North Korean refugees – the fake fundraiser was backed up by a detailed website that contained information about the goal of the 'charitable campaign.' What is even more worrisome is that the threatening Dragon Messenger application was hosted on the official Google Play Store under a bogus name – it was advertised via a WordPress website that contained the fundraiser details listed above. The group behind Dragon Messenger is believed to be called 'Black Shoggoth' – the same North Korean hackers responsible for the development and usage of ROKRAT.

The Dragon Messenger Android Malware is Used against South Korean Targets

It is believed that Android devices infected by the Dragon Messenger were taken over by the attackers, and they could use the threatening implant to perform several tasks. Although the primary focus of this campaign appears to be espionage and information collecting, it is possible that the Dragon Messenger malware also may have been used for money theft.

Android-compatible malware has become a very common occurrence in the past few years, and it is strongly recommended to take the required steps to keep your mobile devices secure. While it is unlikely that you will become the target of the North Korean hackers behind the Dragon Messenger, there are tons of other Android malware families that may end up collecting your files, contacts, payment details or other crucial information.