Mamont (computer virus)

Chronicle

2025: Virus spread in Russia

Management "K" MINISTRY OF INTERNAL AFFAIRS Russia warned about the distribution of malicious software Mamont, which intercepts, push-notices SMS messages and photos from the gallery. The smartphones department announced a new threat on January 24, 2025.

According to the official telegram channel of the UBK of the Ministry of Internal Affairs of Russia, malicious software is distributed through the Telegram messenger in the form of.apk files aimed at different categories of citizens, including military personnel.

𝓲

Фото: Freepik

Attackers send files with the accompanying text "Are you on the video?" Using the word "video" in various variations of the file name. After opening and installing the application, the device becomes infected with a Trojan.

The malware gets access to push notifications, SMS messages and photos in the device gallery. In addition, the Trojan is able to automatically forward a malicious file to all contacts in the messenger.

The main goal of cybercriminals is to gain access to user payments. At the same time, attackers can use any personal data and information from a smartphone for illegal purposes.

Specialists of the BSC of the Ministry of Internal Affairs of Russia emphasize the critical importance of ignoring messages with unknown files, regardless of the sender, to prevent infection of the device.

Cybersecurity experts note the growing sophistication of social engineering methods used by cybercriminals to spread malicious software through popular instant messengers.

The Ministry of Internal Affairs of Russia recommends that users show increased vigilance when receiving any messages with attachments, even if they come from familiar contacts, since their accounts could be compromised.^[1]

Notes