After removing six apps infected with the Joker malware earlier in Sep, Google has now removed 16 more apps from its Play Store.

 

The joker malware a billing-fraud strain of malware, has proven to be a persistent threat for Google Android. Despite the company’s relentless efforts, it’s still found in apps available on the Play Store.

In September, Google removed six such apps, which were infected with the Joker malware, as identified by Pradeo cybersecurity firm. These apps had a total of 200,000 downloads but in july 2020, the Joker malware was once again witnessed on Play Store.

Now, according to a report from cybersecurity firm Zscaler, Google has removed 16 more apps for the same reason. These apps were uploaded to the Play Store in September and had 120,000 downloads.

Logos of malicious apps (Image: Zscaler)

Zcaler’s Viral Gandhi explained that Joker is a spyware that can simulate clicks. It is called fleeceware, designed for stealing contact lists, SMS messages, and device information from the phone, apart from discreetly subscribing for “premium wireless application protocol (WAP)services.”

Joker malware is difficult to detect since it used minimal code. Zscaler researchers tried to understand how it remains so evasive and its payload deployment variations. They learned that the final payload is delivered via a direct URL in most of its variants, which the C&C server sends to the apps. The apps already have the C&C server address hidden inside their code with string obfuscation.

The apps contacted the C&C server soon after installing and then accepting the URL containing the final payload configuration in a JSON file. The file also includes information on the class name it needs to execute itself from the payload. After receiving the configuration, the app downloads and executed the final payload.

Some apps use single-step download mechanisms where an encrypted stager payload URL is encoded in the code. So after infecting the device, instead of downloading the final payload, the app downloads the encrypted stager payload to retrieve the payload and execute it.

There is a third method that some of the apps used for the execution of the payload. It is a complicated method involving an additional step before retrieving the payload from the C&C .

Researchers also noted that despite several variations, the Joker payload remained the same throughout and performed similar functions.

We recommend paying close attention to the permission list in the apps that you install on your Android device. Always watch out for the risky permissions related to SMS, call logs, contacts, and more. Reading the comment or reviews on the app page also helps identify compromised apps, researcher said in a blog post "

Here’s a full list of the apps compiled by researchers:

Private SMS
Care Message
Part Message
Blue Scanner
Desire Translate
Direct Messenger
Paper Doc Scanner
Tangram App Lock
Style Photo Collage
Meticulous Scanner
All Good PDF Scanner
Talent Photo Editor - Blur focus
Mint Leaf Message-Your Private Message
Hummingbird PDF Converter - Photo to PDF
Unique Keyboard - Fancy Fonts & Free Emoticons
One Sentence Translator - Multifunctional Translator

Zscaler notified Google about the apps infected with Joker malware, and the company’s IT team promptly removed them.

On sunday evening there was a Clash between FARDC(DRC army) and Unknown Armed Group in Nyamilima

Near Nyamilima, Rutshuru territory in North Kivu, heavy and light weapons detonations were reported on September 26, 2020. Apparently FARDC were clashing against a non-known rebel group.

Detonations were reported in locals fields in Nyamitwitwi, Gitwa, Muthanga, Mulembwe and surrounding areas. This situation has emerged since early morning Saturday, September 26 Field activities remain paralysed in these cities of Nyamilima as the majority of inhabitants survive on agriculture.

On Sunday evening, Aimé Mukanda Mbusa, a notable from Rutshuru, informs that it is the FARDC military of the 3412th Regiment who reportedly launched an offensive against a rebel group led by a certain Kathulebe who has been insecuring farmers for days without being worried.

While encouraging Congolese military, this human rights defender adds that psychosis prevails there. The army hasn't announced anything on this.

It must be said that this insecure situation is currently affecting several parts of North Kivu province where people still live without hope of waking up, thanks to the provincial and national authorities. Many inhabitants are forced to abandon their villages in order to seek a climate of peace in Goma city. But even in Goma the population is faced with assassinations and other forms of insecurity.

HUMAN RIGHTS ORGANISATIONS IN OICHA REJECTS THE RESULTS OF INVESTIGATION CARRIED OUT BY MILITARY COURT ON THE DEMONSTRATIONS THAT TOOK PLACE IN BENI BETWEEN SEPTEMBER 11-15 AND CALLS FOR MASSIVE RENEWED MILITARY OPERATIONS AGAINST ADF IN THE MOST THREATENED AREAS

 

Collective human rights organizations in Oicha rural township, capital of Beni, North Kivu, reject the result of investigations carried out by the military court in the area into the recent bloody demonstrations between the 11 and September 15, 2020, in Oicha. Those who had resulted in the deaths of several people also from damage.

Their decision emerged from an extraordinary meeting held this Sunday for the cause.

′′ We repeated our decision demanding the unconditional departure of Colonel Jean Pierre Wumbi, PNC Commander and the replacement of Beni Territory Administrator Donat Kibwana. We vehemently criticize and condemn the mensoger and corruption result of auditorial investigations. This, after killing two civilians and systematic looting of several properties by PNC elements, on the night of 14, and the day of 14 September 2020, in Oicha, Masosi neighborhood. In view of the above, the NGOs-Dh, request a new investigation with an unbiased team ", writes the collective.

To do this, these human rights organizations have thus declined a series of large-scale actions to always demand the departure of Beni's territorial PNC administrator and commander from Beni.

These organizations have just declared 2 days dead town dead this Monday throughout the territory of Beni, for this cause.

The latter also demand the launch of new operations in the ADF threat zones, in particular the Ruwenzori sector.

ECCHA in DRC calls president Tshisekede to suspend ANR leader and military intelligence

 

The citizen movement Eccha says ′′ there is acute inefficiency of Congolese intelligence services ′′ and asks President Félix Tshisekedi to dismiss the ANR leader and military intelligence.The attacks by bakata katanga in lumumbashi showed inefficiency in how the whole intelligence body works.

Who are the suspected actors behind the lumumbashi's bakata katanga movie of the ended weekend.

Branding portraits of their ′′ guru ′′ Gédéon Kyungu Muntanga called ′′ Nkambo ′′ and the ′′ flag of the Republic of Katanga ", the Mayi ′′ Bakata Katanga ′′ made them speak again in Lubumbashi. And this is a gunshot. On Friday 25th and Saturday 26th September they broke into the city. Their objective was clearly to seize RTNC (national radio) and provincial government headquarters. Provisional update: 16 militiamen and 3 police elements killed.

Who pulls the strings? Asking the question is answering it. The spectacular escape of ′′ Gideon ′′ from the so-called ′′ high security ′′ prison in La Kasapa on September 7, 2011 and his ′′ surrender ", equally outstanding, on October 11, 2016-en Presence of former Governor of H-Katanga Jean-Claude Musonda Kazembe and Kalev Mutond, then number one of the National Intelligence Agency - are indicative. According to Lush sources, John Numbi's farm was said to have served as a ' stash ' before the foray under review.

On March 28, after another foray by his militiamen into the capital of Haut Katanga, ′′ Gideon ′′ had flown away from the villa that ′′ someone ′′ rented for him in the very chic Golf District in Lubumbashi.

At a ministerial cabinet meeting he chaired in early April, Felix Tshisekedi Tshilombo ordered the ex-militian leader to be 'stalked' and escaped from Kasapa prison. His pursuers are delayed to report on their mission. ′′ The investigation is still underway ", according to the consecrated formula. Sabotage? Connivence?

Ministry of Interior, Fulbert Kunda

Six months later, the Bakata Kanta took a bloody ′′ new walk ′′ in the ex-copper capital. ′′ They wanted to raise the flag of the Republic of Katanga instead of Moïse Tshombe, occupying national television and the provincial government headquarters say consistent sources.

Lubumbashi is the second largest city in the country. It appears that the provincial management of the National Intelligence Agency (ANR) didn't see anything coming. General police intelligence and ex-Demiap (military intelligence), same. complicity seems certain with the ′′ string shooters ".

IS IT ′′ KABILA ′′ AND JOHN NUMBI ?

It's hard to imagine that two to three hundred individuals can accomplish, at night, several kilometres on foot without attracting any attention from the public safety services. This all happened on Friday 25. th.

Correspondent of Radio France International in Lubumbashi, journalist Denise Maheho did not fail to surprise the listeners who followed her ′′ ticket ′′ during the newspaper spoken on Saturday 26 at 12 TU. She claimed, with a point of bad faith, that the Bakata Katanga were 'visibly gun free'. Which was perfectly false. The journalist didn't come back to ′′ correct ′′ this counter truth. Definitely there's something rotten about ′′ Joseph Kabila province ", says Felix Kabange Numbi. Even journalists are not safe.

In a statement made on Saturday, provincial interior minister Fulbert Kunda set opinions on both the modus operandi, the number of victims and the motivations of the ′′ attackers ". There is no doubt that he are militiamen ′′ Mayi Mai Mira ′′ (Independent Movement of African Revolutionaries) from ′′ Gideon ". According to him, there were two groups. The first was composed of two hundred individuals carrying guns, machetes and arrows. The second one, a hundred individuals. There were women and children there. Provisional balance sheet: 19 killed. To know; 16 militiamen and 3 members of the police.

According to Minister Kunda, police officers had to use tear gas to disperse militiamen. These would have been shot back. It's the blast.

From left to right: ′′ Gideon ", ′′ Joseph Kabila ′′ and John Numbi

Question: Who manipulates ′′ Gideon ′′ Kyungu Mutanga and his militiamen? Observers had their eyes on the duo ′′ Joseph Kabila "- John Numbi Banza on Saturday night. According to them, the two men ′′ would be in charge ". ′′ Gideon ′′ is used as ′′ scratchy hair ′′ to ′′ distract ′′ President Felix Tshisekedi from the real expectations of the population. The same carousel takes place in both Kivu and Ituri with domestic and foreign armed stripes.

POPULAR SELF DEFENSE FORCES

It seems to be forgotten that ′′ Kabila ", Numbi and Gédéon are ′′ old knowledge ". They participated in the creation by LD Kabila of the ′′ FAP ′′ (Forces d ' auto-defense popular) ... It was a militia charged with preventing the taking of Lubumbashi by RCD's pro-Rwandan rebel movement (Rally Congolese Rally for Democracy). And this after the break of ′′ military cooperation ′′ with Rwanda at the end of July 1998.

In July 1999, Mzee Kabila signed Lusaka's ceasefire agreement with the various rebellions. Immediately afterwards, the FAPs are delivered to themselves. The weapons and ammunition once received have enabled them to work ′′ on their own account ". The next is known with the infernal axis Pweto-Mitwaba-Malemba Nkulu. From 2002 to 2006, ′′ Gideon ′′ and his militiamen will commit unspeakable atrocities.

In 2006, the man surrendered to UN forces in Congo in Katanga. Against all expectations, he is housed with wife and children at the officer s' mass in Lubumbashi. This beautiful world will be fed daily by then Katanga Governor Urbain Kisula Ngoy.

Following pressures from the international community and civil society activists, Gideon is being tried by the garrison military court in Likasi. On March 5, 2009, he was sentenced to death and embastiled in Kasapa. On September 7, 2011, the ex-militian leader escapes with 963 prisoners. Everything happens in broad daylight.

LIVELY PERMUTATIONS

The ′′ surrender ′′ of ′′ Gideon ′′ in the presence of then ANR deputy head Kalev Mutond.

A drama strike takes place in December 2013. In a report to the Security Council Presidency on the armed gangs operating in Congo-Kinshasa, UN experts report ′′ serious suspicions ′′ on former Governor of The Central Bank, Jean-Claude Masangu, and General John Numbi. The first one would be the Bakata Katanga ′′ financiers Second one, Supplier of Arms and Ammo. No investigations were carried out to break the truth. These ' revelation s' were obtained after interviewing militia apprehended in November 2013.

In early December 2014, General Jean-Claude Kifwa created a small event by inviting the fugitive Gédéon to surrender and lay down arms to benefit from the law of amnesty. Did he get the ′′ green light ′′ from ′′ Kabila "? Looks like yes. This was probably a test balloon to gauge the outrage capacity of the population.

To the general surprise, ex-militia leader surrenders on October 11, 2016. The man wore a matching sweater with the portrait of Joseph Kabila and a slogan: ′′ Kabila shikata ". In the committee welcome, there was the presence of Jean-Claude Musonda Kazembe and Kalev Mutond, governor of Haut-Katanga and then ANR boss respectively. There is no need to draw a drawing to see that ex-president ′′ Kabila ′′ was the real ′′ master of ceremony ". What happened on Friday night to Saturday in Lubumbashi is an attempt at ′′ insurrectional movement ".

According to sources, the Mayi-Mayi had ′′ stashed ′′ on General John Numbi's farm before they led their incursion. This information will be confirmed or reversed during the hearing of militiamen apprehended. How long will the former head of state be allowed to act impunityly as a ′′ string gunman ′′ of Bakata Katanga and other armed gangs destabilizing the country?

′′ What happens in Beni is a well-orchestrated mafia with economic activities as a focus ′′...The ADF terrorist survive in Ituri and north Kivu because of selfishness of some business men and politicians; says MP Iracan Gratien.

As part of the strong delegation of the National Defence Minister in Beni, National MP Iracan Gratien,qualifies the repetitive killings perpetrated by Ugandan ADF rebels in this well-organized mafia area aimed at blocking all activities of the local population, especially economic activities considered a foundation of development.

This Bunia City Official in Ituri, who salutes the bravery of FARDC elements involved in the stalking of the ADF Rebellion Nebula, has during an interview given to Benician press this Sunday, September 27, 2020, believed that ADFs still active in this part of North Kivu province, are making tremendous traffic on some agricultural products in collaboration with a few businessmen.

He believes, however, that a great mobilization and / or community participation supported by the regular army, can make it possible to eradicate the ADF phenomenon quickly and permanently. He also rejects the assumption that he has a balkanization plan for this part of the country.

′′ I did the analysis, I listened to the people and the army and did the self-criticism, I think we are not facing a Balkanization situation. What's happening in Beni is a mafia that is well orchestrated with economic activities as a focus. The focus is cocoa growing.

This attracts the complicity of people from outside the country and indigenous people working with them to exploit cocoa from poor people. We have analyzed that the ADFs are there, making huge traffic on cocoa products with the complicity of some businessmen and others. The army did what it needed to do, but much remains to be done to stabilize this corner of country, said the national deputy Ircan Gratien of Saint-Nicholas elected from Bunia.

On his side, Aimé Ngoy Mukena, National Defence Minister, has Saturday, September 26, 2020 during the official surrender of the Mbau-Kamango road to civil authority, reassured that the Congolese armed forces will be very much attentive to any possible ADFs on this axis.

"... The ADFs you saw, you will never see them here again. They may try to come, but we will still push them back to their last entrenchment he told the local press.

It should be noted that despite the so-called big military operations in the Beni region, the security situation remains a matter of concern. It is characterized by bloody killings in almost every corner of Beni city and territory. Situation that has for several years negatively impacted the development of this part of the part and the socio-economic life of the local population.

Sylvestre Ilunga calls on justice to take up the incident of Bakata Katanga militia in Lubumbashi and to prosecute the perpetrators and co-authors.

Sylivestre Illunga

The katanga flag

Tshisekede in Brussels

Hours after the incursion of Bakata Katanga elements into the city of Lubumbashi, Prime Minister Sylvestre Ilunga Ilunkamba brought together all security officials and government officials involved in this security sector. The prime minister condemned these acts by calling on justice to set the responsibilities of the perpetrators and co-authors of this incursion into downtown Lubumbashi.

... This foray is a work of insurgents who attacked the post office square and the locals of RTNC Haut-Katanga, using women and children as shields. The Prime Minister insists that all responsibilities should be unfailing for the perpetrators, co-authors and accomplices of these acts said Gilbert Kankonde Malamba, Deputy Prime Minister and Minister of Interior and Security.

According to the VPM from the inside, security services must strengthen the security of persons and their property so that such situations do not happen again in Haut-Katanga.

According to the provincial government, this is an attack by militiamen loyal to the warlord Gideon Kyungu who disappeared at the end of March last in Lubumbashi City in an attack that his men simultaneously carried out at the capital of the Haut-Katanga and other cities in the Katanga region including Kasumbalesa, Likasi and part of Lualaba. 32 people were killed including a policeman killed in Lubumbashi.

In this Saturday's attack, authorities say they have recovered ′′ 7 weapons, several arrows and machetes, and Gédéon Kyungu's bad boys.

In the morning, militiamen were prevented from raising the 'Katanga' flag at Poste Square in downtown Lubumbashi. The situation has returned to normal early afternoon in Lubumbashi. The mayor of the city called the population calm and freely go to his occupations.