Mars

Mars is a malicious software (malware) that has been discovered by the Trend Micro Mobile Application Reputation Service (MARS) team. This malware, related to other known threats like Vidar and Redline, has been involved in cryptocurrency-mining and financially-motivated scam campaigns targeting Android users. The MARS team also identified another fully undetected Android banking trojan, dubbed MMRat, which has been targeting mobile users in Southeast Asia since late June 2023. These discoveries highlight the growing sophistication of cyber threats and the necessity for advanced cybersecurity measures. The MARS team uses leading sandbox and machine learning technologies to cover Android and iOS threats, protecting devices against malware, zero-day and known exploits, privacy leaks, and application vulnerabilities. However, despite these efforts, the proliferation of malware clones such as "Oski" and "Mars" continues, likely due to the original malware being cracked. This underlines the persistent challenges faced in the realm of cybersecurity and the need for continuous innovation and vigilance. In addition to Mars, other products offered by Intellexa include network injection systems like Jupiter and Predator. These systems are installed at mobile operator ISPs and can redirect any unencrypted HTTP request from a smartphone to an infection server. Jupiter even enables injection into encrypted HTTPS traffic, but only works with domestic websites hosted by a local ISP. These developments demonstrate the increasing complexity of malware attacks and the importance of robust cybersecurity infrastructure across all internet services.